In AD, a group is a collection of AD objects. Instead of assigning permissions and rights to each AD object individually, groups are used for a more structured administration. Note that a group is an object too, thus it can be placed inside an OU. Groups are managed through the Active Directory Users and Computers console as shown in Figure 4.27. In AD, there are two types of groups:
- Security groups: These are explicitly used to assign permissions to shared resources on a network.
- Distribution groups: These are particularly used to distribute email lists in an organization's network:
Figure 4.27. Group types in Windows ...
