MCTS Windows Server® 2008 Active Directory Configuration: Study Guide

9.8. Exam Essentials

Understand the purpose of security principals.

Security principals are Active Directory objects that can be assigned permissions. Understanding how they work is vital to creating a secure Active Directory environment. Security principals include users, groups, and computers.

Understand group types and group scope.

The two major types of groups are security and distribution groups, and they have different purposes. Groups can be local, global, or universal. Domain local groups are used to assign permissions to local resources, such as files and printers. The scope of global groups is limited to a single domain. Universal groups can contain users from any domains within an Active Directory forest.

Understand the purpose and ...