You can copy Active Directory groups with the Active Roles Console.
To copy a group
-
In the Console tree, locate and select the folder that contains the group that you want to copy.
-
In the details pane, right-click the group you want to copy, then click Copy to start the Copy Object - Group wizard.
-
Follow the wizard pages to specify properties of the new group, such as the group name, pre-Windows 2000 name, description, group scope, and group type.
Figure 12: Copying a group
-
(Optional) If you want to set values for additional properties (those for which the wizard pages do not provide data entries), click Edit Attributes on the completion page of the wizard.
-
After setting any additional properties for the copy of the group, click Finish on the completion page of the wizard.
NOTE: Consider the following when copying a group:
-
The behavior of the wizard pages may vary depending on the configuration of Active Roles policies. To determine whether a given item on a page is under the control of a certain policy, observe the text label next to the item: the underlined text label indicates that some policy restrictions are in effect. Click underlined text labels to examine the policies that govern the behavior of the wizard pages. For more information, see Getting policy-related information.
The policy information is also displayed whenever you supply a property value that violates a policy restriction. The wizard cannot proceed until you enter an acceptable value.
-
By default, some common properties are carried over to the copied group from the original group. Thus, the group membership list is copied from the original group, and can be modified in the Copy Object - Group wizard.
-
The group scope and group type are also copied from the original group, but these properties cannot be modified in the Copy Object - Group wizard. You can change these properties after the copy of the group is created. For instructions, see Changing group type and group scope.
-
To locate the group that you want to copy, use the Find feature of Active Roles. Once you found the group, you can start the Copy Object - Group wizard from the Find dialog by right-clicking the group in the list of search results and clicking Copy.
You can modify the properties of Active Directory groups with the Active Roles Console.
To modify group properties
-
In the Console tree, locate and select the folder that contains the group you want to modify.
-
In the details pane, right-click the group you want to modify, then click Properties.
Figure 13: Modifying group properties
-
Use the tabs in the Properties dialog to view or modify properties of the group.
-
If you want to view or modify additional properties (those for which the tabs in the Properties dialog do not provide data entries), navigate to the Object tab and click Advanced Properties.
-
After setting all the properties you want, click OK.
NOTE: Consider the following when modifying group properties:
-
The behavior of the user interface elements in the Properties dialog may vary depending on the configuration of Active Roles policies. To determine whether a given item on a tab is under the control of a certain policy, observe the text label next to the item: the underlined text label indicates that some policy restrictions are in effect. Click the underlined text labels to examine the policies that govern the behavior of the user interface elements. For more information, see Getting policy-related information.
The policy information is also displayed whenever you supply a property value that violates a policy restriction. The wizard cannot proceed until you enter an acceptable value.
-
To modify properties for multiple objects, press and hold Ctrl, then click each object. Right-click the selection, then click Properties.
-
You can also access the Advanced Properties dialog for an object by right-clicking the account and selecting All Tasks > Advanced Properties.
-
To locate the object that you want to modify, use the Find function of Active Roles. Once you found the object, open the Properties page by right-clicking the object, and clicking Properties.
You can change the group type (security or distribution) of existing groups with the Active Roles Console.
To convert a group to another group type
-
In the Console tree, locate and select the folder that contains the group you want to modify.
-
In the details pane, right-click the group you want to modify, then click Properties.
-
On the General tab in the Properties dialog, under Group type, select the group type (Security or Distribution) you want to specify for the group.
Figure 14: Changing group type and group scope
You can change the scope (domain local, global, universal) of a group with the Active Roles Console.
To change the group scope
-
In the Console tree, locate and select the folder that contains the group you want to modify.
-
In the details pane, right-click the group you want to modify, then click Properties.
-
On the General tab in the Properties dialog, under Group scope, click the group scope you want for this group.
For information about possible scope settings, see Group management.
NOTE: Active Roles supports the following group scope changes:
-
Global to universal: You can perform this scope change only if the modified group is not a member of another global group.
-
Domain local to universal: You can perform this scope change only if the modified group does not have another domain local group as a member.
-
Universal to global: You can perform this scope change only if the modified group does not have another universal group as a member.
-
Universal to domain local: You can perform this scope change without any restictions.
You can rename Active Directory groups with the Active Roles Console.
To rename a group
-
In the Console tree, locate and select the folder that contains the group you want to rename.
-
In the details pane, right-click the group and click Rename.
-
Type a new name (or clear the existing name), then press Enter to display the Rename Group dialog.
Figure 15: Rename Group
-
Use the Rename Group dialog to modify (if needed) the group name and the group name (pre-Windows 2000).
-
When finished, click OK.
NOTE: Consider the following when renaming an object:
-
The behavior of the dialog may vary depending on the configuration of Active Roles policies. To determine whether a given item in the dialog is under the control of a certain policy, observe the text label next to the item: the underlined text label indicates that some policy restrictions are in effect. Click underlined text labels to examine the policies that govern the behavior of the dialog. For more information, see Getting policy-related information.
-
To locate the object you want to rename, use the Find function of Active Roles. Once you found the object, rename it by selecting it in the list of search results, right-clicking it, clicking Rename, then specifying the new name. To apply the new name, press Enter.
