Managing OU Security Groups in Active Directory

Manage security groups and members for Active Directory Organizational Units.

Add a Group

1. Open the Start menu and search for "Active Directory Users and Computers." Press Enter.
2. Navigate to your OU.
3. Click Action, then New, and then Group.
4. Enter a name for the group.
   Note: IT Services strongly recommends that because group names are domain-wide, they start with the four-letter department code followed by a dash and the basic description. For example, within the domain, there can be a group named "wcob-techs" and another named "vcfa-techs," but only one named "techs."
5. Keep the default Global Security options. Click OK.

Add Members

1. Double-click on the group in AD Users and Computers. Click the Security tab, and click Add.
2. Enter "gacl\UARKusername," where UARKusername is the member's username. Click OK.
   Note: It might be necessary for a user to log out and log back in again to access group resources.
3. Grant group access to a resource by choosing the object's Security tab and entering the group name as "gacl\groupname."

Remove Members

1. Right-click the group and select Properties.
2. In the Security tab, click the UARK username to remove.
3. Click the Remove button. Click OK.