Defining Policies for Security Group Management

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Policies for security group management are a significant part of your resource authorization strategy. For example, you need to establish a policy defining who can create security groups and when they should be created. You also need policies for security group naming, security group nesting, and security group retirement. Figure 15.3 shows the tasks for defining security group policies.

Note

• For the purposes of this chapter, "security group policies" refers to policies for security group management and is not related to Group Policy or Group Policy objects. For more information about Group Policy, see "Designing a Group Policy Infrastructure" in Designing a Managed Environment of this kit, and see "Group Policy" in Help and Support Center for Windows Server 2003.

Figure 15.3   Defining Policies for Security Group Management