Microsoft Active Directory
In Microsoft Active Directory, when you create a new group, you must select a group type. The two group types, security and distribution. Naviteer uses the Security type group for all client database storage.
Security: Security groups allow you to manage user and computer access to shared resources. You can also control who receives group policy settings. This simplifies administration by allowing you to set permissions once on multiple computers, then to change the membership of the group as your needs change. The change in group membership automatically takes effect everywhere. You can also use these groups as email distribution lists.
Microsoft Active Directory allows you to use group policies to define user or computer settings for an entire group of users or computers at one time. The settings that you configure are stored in a Group Policy Object (GPO), which is then associated with Active Directory objects such as sites, domains, or organizational units.
Group policies cover many different aspects of the network, desktop, and software configuration environment, including:
•Application deployment policies: These policies assign or publish applications to users or computers, and affect the applications that users access on the network.
•File deployment policies: These policies allow an administrator to place files in special folders on the user's computer, such as the desktop or My Documents areas.
•Script policies: Using a script policy, an administrator can specify scripts that should run at specific times, such as login/logout or system startup/shutdown.
•Software policies: Administrators can use software policies to globally configure most of the settings in user profiles, such as desktop settings, Start menu options, and applications.
•Security policies: These policies allow an administrator to restrict user access to files and folders, configure how many failed login attempts will lock an account, and control user rights.
|