Create AD Users and Groups – Server 2016

1. Choose Start→ Administrative Tools → Active Directory Users and Computers.
or
Open Server Manager and click on Tools tab then select Active Directory Users and Computers.

Active Directory Users and Computers

2. Expand the server node and click on the Users node, when you see all the default users and groups just click on the Create a new User button on the top as shown to create a new user account.
Create User button

3. Enter the user details like name, last name, logon name etc. The logon name is the name that you want to logon to the network through, you will be given an email address in the network like mine is mehdi@tactig.com as shown then hit Next.
User details

4. Now enter a complex password then confirm your password and below the password box you’ll see some options that should know them;

User must change the password at next logon; is used when you create a user and give a simple password as a network administrator then you want the user to change the password at first logon.
User cannot change password; is used when you don’t want a user to change his account password.
Password never expires; is used when you don’t want users to change the password frequently. Most organizations force the users to change the password after a particular time. It is good to have the most secure account.
Account is disabled; is used when you want to disable unused accounts. Leave the first option selected and hit Next.

Enter Password

5. When the user is created in Users container, finish the wizard by clicking on the Finish button.
Finish wizard

#2: Create a group
After creating users, now it’s time to create the groups we need for our specific team, location or jobs. Groups are created for simplifying the management. When you create a group, specify some people as a member of that group, you give some rights to that group instead of giving the ever single user that right. Members of the group are not users only, they can be admins. You can make a group member of other groups which is called nesting-group.

1. In order to create a group click on the Users node, then click on Create a new group button on the top as shown.
Create a new group

image-6-1

2. Enter the group name and you’ll see group scopes are available, select the Global scope. It is used when you want to make a group according to geography, common job, department, functions. Now choose the Group type (Security option: It is used when you want to specify which group can have access to which resource.
New object – group

image-7-1

#3: Group Membership
1. If you want someone to be a member of a group, you can do it from user properties > member of and make it a member of a group. Also, you can go to group properties > members and add a user. I follow the first way, right-click on the user and select Properties.
User Properties