Week 5: USER AND GROUP MANAGEMENT

USER AND GROUP MANAGEMENT

is a fundamental aspect of system administration, particularly in environments that utilize Active Directory (AD)

USER AND GROUP MANAGEMENT

Proper management of user accounts and groups is essential for maintaining security, ensuring appropriate access to resources, and facilitating collaboration within an organization

USER ACCOUNTS

are individual profiles that allow users to log into a system and access resources. Each account is associated with specific permissions and settings.

USER ACCOUNTS

Example: In an organization, each employee is assigned a unique user account that includes their username, password, and personal settings.

GROUPS

are collections of user accounts that can be managed collectively. By assigning permissions to a group, administrators can simplify the management of user rights and access controls.

GROUPS

Example: A "Sales" group can be created to include all sales team members. Instead of assigning permissions to each user individually, the administrator can assign access rights to the "Sales" group, which automatically applies to all its members

• SECURITY GROUPS

• DISTRIBUTION GROUPS

TYPES OF GROUPS:

SECURITY GROUPS

Used to assign permissions to shared resources. Members of a security group can be granted access to files, folders, and applications.

DISTRIBUTION GROUPS

Used primarily for email distribution lists and do not have security permissions associated with them

Permissions

define what actions users and groups can perform on resources. Common permissions include read, write, modify, and delete

ACCESS CONTROL LISTS (ACLS)

are used to define permissions for users and groups on specific resources. They specify which users or groups have access to a resource and what actions they can perform.

SECURITY GROUPS

WHICH GROUP?

PAYROLL ACCESS → ?

DISTRIBUTION GROUPS

WHICH GROUP?

EMAIL TO ALL EMPLOYEES → ?

SECURITY GROUPS

WHICH GROUP?

SHARED MARKETING FOLDER → ?