Windows 2000 Administration in a Nutshell

Name

local group

Synopsis

Add members to, create, delete, modify, or rename a local group.

Procedures

Local groups are managed using the Local Users and Groups snap-in. This snap-in is only available on member servers running Windows 2000 Server and client computers running Windows 2000 Professional. However, no shortcut in the Administrative Tools program group is created during installation of these machines, so you must first create a console containing this snap-in as follows:

Start → Run → mmc (opens an empty console window) → Console → Add/Remove Snap-in → Add → select Local Users and Groups → Add → select Local Computer to install the snap-in

Now proceed as follows.

Add Members to a Local Group

Select group → Action → Add to Group → Add → select members → Add

Create a Local Group

Select Groups container → Action → New Group → <group_name> → Add → select members → Add → Create

The New Group box stays open after you click Create, enabling you to continue creating more local groups. You can create a group without any members and then add members later if you prefer.

Delete a Local Group

Select group → Action → Delete

Deleting a group does not delete the members of the group. If you have various permissions assigned to a group and you delete the group, you cannot regain those permissions simply by creating a new group with the same name as the old group. This is because groups are internally represented within the Local Security Database by a unique security identifier (SID) assigned ...