Administration and Maintenance of Active Directory Accounts

An integral aspect of securing your network is the administration of the users and groups that have access to the various Active Directory Services. As a systems administrator you need to create, modify, and troubleshoot issues relating to user and group accounts.

Write a 2-3 page report based on the questions below, that explains and details the implementing, managing, and maintaining user and group accounts used in Active Directory.

1. Provide in-depth information about the built-in group types, and detail each group. Explain the security concerns as well as the risks related to each group account.
2. List and describe the domain local, global, and universal group scopes. Detail the concepts related to nesting of these groups for proper assignment of permissions to resources.
3. Detail the basics of group memberships and the concepts relating to access tokens as well as nesting of groups.
4. Discuss the differences between group types and scopes including distribution and security groups.
5. Explain the processes that can be used to create multiple users or groups. Provide examples of each type of technique (batch files, CSVDE, LDIFDE, WSH) that can be used.
6. List and detail five methods for monitoring and maintaining group accounts.