Create and Manage Users and Groups in Active Directory

How to Create a New Active Directory User Account:

1. Open Server Manager. By default, this tool is located at start -> Windows Administrative Tools

2. Once Server Manager is opened, go to the Tools tab and select Active Directory Users and Computers.

3. On Active Directory Users and Computers screen, go to your created domain (mine is apexitsupport.co.za), right-click and go to New. After that select Organizational Unit.

4. On the New Object - Organizational Unit screen, give the organizational unit a name, check the 'Protect container from accidental deletion' checkbox and click on the OK button.

5. On the newly created organizational unit, right-click, go to New and select User.

6. On the New Object - User screen, enter user accounts details and click on the Next button when you are done.

• First name: This will be the account's first name.

• Last name: This is the user's last name.

• Initials: This is the user's middle initials. This is optional but beneficial when you have users with the same first and last name.

• Full name: This will fill in automatically.

• User logon name: This is the name used to log into windows domain

7.  On the following screen, assign a password for the user and click on the Next button when you are done.

• Check the 'User must change password at next logon' checkbox 

• Check the 'Account is disabled' checkbox. This makes the account inactive. You will need to enable the account later. You can leave the checkbox unchecked if the user has to be given an account immediately.

8. Verify the settings and click on the Finish button.

How to Create a Group in Active Directory:

1.  Log into your domain controller.

2. Open Server Manager -> Tools and select Active Directory Users and Computers.

3. Expand your domain from the left-hand menu. Right-click on the desired object, select New, and select Group.

4.  On the New Object - Group screen, give your group a name. Under Group scope, select the Global radio button. And under Group type, select the Security radio button. Click on the OK button.

5. Once your group has been created, right-click and select Properties.

6. Navigate to the Members tab and select the Add button. [This step allows you to add members to the group]

7.  On the pop-up screen, enter the user name you wish to add to this group and click on the Check Names button.

8. Once the user name has been selected, click on the OK button.

9. Click on the Apply button to save the changes. And that's it, your user wil be part of the group.