A2oz

How Do I Change Group Permissions in Active Directory?

Published in Active Directory Management 2 mins read

You can change group permissions in Active Directory using the Active Directory Users and Computers (ADUC) console or PowerShell.

Using Active Directory Users and Computers (ADUC)

  1. Open ADUC: Start by opening the Active Directory Users and Computers console. You can find it by searching for "dsa.msc" in the Windows search bar.
  2. Locate the Group: Navigate to the organizational unit (OU) where your group is located. Expand the OU tree until you find the group you want to modify.
  3. Right-click on the Group: Right-click on the group and select Properties.
  4. Select the "Member Of" Tab: In the group properties window, click on the "Member Of" tab.
  5. Add or Remove Groups: Here, you can view the groups this group is a member of. To add a group, click "Add", select the group you want to add, and click "OK". To remove a group, select the group from the list and click "Remove".
  6. Apply Changes: Once you've made the desired changes, click "Apply" and then "OK" to save the changes.

Using PowerShell

You can use PowerShell cmdlets to change group permissions. Here's an example:

# Add a group to another group
Add-ADGroupMember -Identity "GroupName" -Members "GroupToAdd"

# Remove a group from another group
Remove-ADGroupMember -Identity "GroupName" -Members "GroupToRemove"

Replace "GroupName" with the name of the group you want to modify, "GroupToAdd" with the name of the group you want to add, and "GroupToRemove" with the name of the group you want to remove.

Practical Insights

  • Consider the impact of changes: Be mindful of the potential impact of modifying group permissions. Changes to group membership can affect user access to resources.
  • Use caution with sensitive groups: Be extra careful when modifying permissions for groups that have access to critical resources or sensitive data.
  • Document changes: It's always a good practice to document any changes you make to group permissions. This can help you track changes and troubleshoot potential issues.

Related Articles