You can assign a manager to a group with the Active Roles Console.
To assign a manager to a group
-
In the Console tree, locate and select the folder that contains the group you want to assign a manager to.
-
In the details pane, right-click the group, then click Properties.
-
On the Managed By tab in the Properties dialog, click Change under the Name box.
Figure 16: Assigning a manager to a group
-
Use the Select Objects dialog to locate and select the user or contact you want to be responsible for the group - the manager of the group.
-
(Optional) To authorize the assigned manager to add or remove members from the group, select the Manager can update membership list check box.
NOTE: Consider the following when assigning a manager to a group:
-
To assign additional managers to the group, click the button next to the Secondary owners box. Secondary owners can be given the same rights over the group as the manager. For example, selecting the check box beneath the Secondary owners box gives the secondary owners the authority to add or remove members from the group.
-
It is possible to assign the management of the group to another group: select a group in the Select Objects dialog that you use to specify the manager or a secondary owner. This enables every member of the group to act as the manager or secondary owner.
-
To locate the group you want to modify, use the Find function of Active Roles. Once you found the group, open its Properties dialog by right-clicking the group in the list of search results, then clicking Properties.
Depending on its scope, a group may contain members (users, groups, computers, contacts) from anywhere in the forest, or only members from its own domain.
To add a member to a group
-
In the Console tree, locate and select the folder that contains the group to which you want to add a member.
-
In the details pane, right-click the group, then click Properties.
-
On the Members tab in the Properties dialog, click Add.
Figure 17: Adding members to a group
-
In the Select Objects dialog, type the name of the directory object, such as a user or computer, that you want to add to the group, or select and add the object from the list, then click OK.
NOTE: Consider the following when adding members to a group:
-
In addition to users and computers, you can also add contacts and other groups to a group.
-
In the Select Objects dialog, you can select objects from the list or type object names. Click Check Names to verify the names you type. If Active Roles cannot find an object, it prompts you to correct the name.
-
On the Members tab, you can manage user accounts and other objects directly from the list of members. To manage a group member, right-click the member and use commands on the shortcut menu.
-
When you select multiple groups, the Members tab lists the objects that belong to each of the selected groups. If a given object does not belong to one of the selected groups, then that object does not appear in the list.
-
The Members tab displays a list of objects that belong to the group. You can select the Show indirect members check box for the Members list to also display the objects that belong to the group indirectly (because of group nesting). If that check box is cleared, the Members list displays only those objects that were added to the group directly.
-
The Add button appears on the Members tab only if the group is a basic group. For a dynamic group, use the Membership Rules tab to populate the group. For details, see Administering dynamic (rule-based) groups.
-
The Temporal Membership Settings button can be used to specify the date and time when the object should be added or removed from the selected groups. For more information about this feature, see Using temporal group memberships.
-
Depending on the scope of a group, the group can hold members from anywhere in the forest or only from its own domain. For more information, see Group management.
You can remove members from Active Directory groups with the Active Roles Console.
To remove a member from a group
-
In the Console tree, locate and select the folder that contains the group from which you want to remove a member.
-
In the details pane, right-click the group, then click Properties.
-
On the Members tab in the Properties dialog, click the member you want to remove, then click Remove.
NOTE: Consider the following when removing members from a group:
-
The Members tab displays a list of objects that belong to the group. You can select the Show indirect members check box for the Members list to also display the objects that belong to the group indirectly (because of group nesting). If that check box is cleared, the Members list displays only those objects that were added to the group directly.
-
With the Show indirect members check box selected, the Members list also includes the objects that belong to the group indirectly. If you select such an object from the list, the Remove button is unavailable. An object can be removed from only those groups of which the object is a direct member.
-
The Remove button appears on the Members tab only if the group is a static group. For a dynamic group, use the Membership Rules tab to add or remove members from the group. For more information, see Administering dynamic (rule-based) groups.
You can perform Exchange-related tasks (for example, creating or deleting email addresses) on Active Directory (AD) groups with the Active Roles Console.
To perform Exchange tasks on a group
-
In the Console tree, locate and select the folder that contains the group you want to perform Exchange tasks on.
-
In the details pane, right-click the group, then click Exchange Tasks to start the Exchange Task Wizard.
-
On the Available Tasks page of the wizard, select the task you want to perform.
The following tasks are available, depending on the selected group:
-
On the next page of the wizard, do one of the following, depending on the selected task:
-
Establish E-mail Addresses: Modify the alias of the group, if needed. By default, the alias is the same as the name of the group.
-
Delete E-mail Addresses: Confirm the deletion of the email addresses.
-
On the completion page of the wizard, review the results of the task. To view the progress report, click Back. To close the wizard, click Finish.
NOTE: Consider the following when performing Exchange tasks on a group:
-
You can perform Exchange tasks on multiple objects at a time. To do so, start the Exchange Task Wizard by selecting the objects, right-clicking the selection, and clicking Exchange Tasks.
-
To locate the objects on which you want to perform Exchange tasks, use the Find function of Active Roles. Once you found the objects, start the Exchange Task Wizard by selecting the objects in the list of search results, right-clicking the selection, and clicking Exchange Tasks.
