《(精品)6-ManagingAccesstoResourcesbyUsingGroups.ppt》由会员分享，可在线阅读，更多相关《(精品)6-ManagingAccesstoResourcesbyUsingGroups.ppt（12页珍藏版）》请在taowenge.com淘文阁网|工程机械CAD图纸|机械工程制图|CAD装配图下载|SolidWorks_CaTia_CAD_UG_PROE_设计图分享下载上搜索。
1、 Managing Access to Resources by Using GroupsOverviewnIntroduction to Windows 2000 GroupsnImplementing Groups in a WorkgroupnImplementing Groups in a Domain nBest Practicesu Introduction to Window 2000 Groups nHow Windows 2000 Groups WorknGroups in Workgroups and DomainsHow Windows 2000 Groups WorkP
2、ermissionsGroupPermissionsUserPermissionsUserPermissions Assigned Once for Each User AccountPermissions Assigned Once for a GroupInstead ofInstead ofPermissionsUsernGroup Members Have the Rights and Permissions Granted to the GroupnUsers Can Be Members of Multiple GroupsnGroups and Computers Can Als
3、o Be Members of a GroupGroups in Workgroups and DomainsDomainWorkgroupnCreated on Domain ControllersnReside in Active DirectorynUsed to Control Resources in the DomainnCreated on Computers That Are Not Domain ControllersnReside in SAMnUsed to Control Access to Resources for the ComputerDomain Contro
4、llerClient ComputerMember ServerSAMSAMSAMSAMu Implementing Groups in a WorkgroupnLocal GroupsnBuilt-in Local GroupsnThe Strategy for Using Local Groups in a WorkgroupnCreating Local GroupsLocal GroupsnThe Guidelines for Local Groups:lUse local groups on computers that do not belong to a domain lUse
5、local groups to control access to resources and who can perform system tasks on the local computernMembership Rules for Local Groups:lLocal groups can only contain local user accounts that are on the local computerlLocal groups cannot be a member of any other group nMembers of the Administrators Gro
6、up or Account Operators Group on the Local Computer Can Create Local GroupsBuilt-in Local GroupsnBuilt-in Local Groups:lMembers have rights to perform system taskslUser accounts can be addednSpecial Identities(Special Groups):lOrganize users for system uselHave automatic membership that cannot be mo
7、difiedBuilt-in Groups Have a Predetermined Set of Rights and They Cannot Be DeletedCreating Local GroupsComputer ManagementAction ViewTreeComputer Management(Local)System ToolsEvent ViewerSystem InformationPerformance Logs and AlShared FoldersDevice ManagerLocal Users and GroupsUsersGroupsStorageSer
8、vices andCreates a new local groupNew GroupRefreshHelpNew GroupGroup name:Description:Project1AddRemoveCreateCloseOptionalOptionalRequiredRequiredAdd or Remove MembersAdd or Remove MembersMembers:Project1 dataCreating and Deleting Domain GroupsnYou Use Active Directory Users and Computers to Create
9、and Delete GroupsnWhen You Delete a Group Its:lRights and permissions are removedlMembers are not deletedlSID is never used againNew Object-GroupCreate in:nwtraders.msft/UsersGroup name:Group name(pre-Windows 2000):Group scope:Domain localGlobalUniversalGroup type:Security DistributionOKOKCancelPubl
10、icGroup NameGroup NameAdding Members to Domain GroupsGroup 01 PropertiesGeneralMembersMember Of Managed ByMembers:NameActive Directory FolderAdd.RemoveRemoveOKCancelApplyApplySelect Users,Contacts,Computers,or GroupsNameIn FolderLook in:nwtraders.msftCasablancaPortlandSeattleDenverAdministratorGuest
11、TsInternet UserA AddddCasablanca;Portland Check NamesOKOKCancelnwtraders.msft/Casablanca nwtraders.msft/Portlandnwtraders.msft/Seattlenwtraders.msft/Denver OUnwtraders.msft/Usersnwtraders.msft/Usersnwtraders.msft/Users SelectSelect AddAddReviewnIntroduction to Windows 2000 GroupsnImplementing Groups in a WorkgroupnImplementing Groups in a Domain