# Managing Windows Local Groups

- [Name the Configuration](#step-1-name-the-configuration)
- [Define Configuration](#step-2-define-configuration)
- [Define Target](#step-3-define-target)
- [Deploy Configuration](#step-4-deploy-configuration)

Windows local groups are a type of security group in the Microsoft Windows operating system. They are used to organize and manage user accounts and computer resources on a local computer or server. To put it shortly, local groups are a collection of different user accounts that share the same resources and have similar accessibility permissions.

Local groups are defined on a specific computer or server to grant permissions to resources such as files, folders, and printers. They can also be used to assign privileges to users and groups, such as the ability to log on locally or to perform administrative tasks.

Local groups can also be created and customized to meet specific security requirements. For example, a local group might be created to provide access to a particular application or service, or to restrict access to specific files or folders.

The Group Management configuration allows you to add, modify, or delete local groups from the computers.

## Step 1: Name the Configuration

Provide a name and description for the Group Management Configuration.

## Step 2: Define Configuration

You can perform the following actions:

- [Add Group](#add-group)
- [Delete Group](#delete-group)
- [Modify Group](#modify-group)

### Add Group

To add a group to the computer, select the **Add Group** link from the Choose Group Action table and specify the following:

| Parameter | Description |
|---|---|
| Group Name | The name of the group that has to be created. |
| Description | The description of the group. |
| Add Member | Select the Member Type as Local, Domain User, or Domain Group and specify/select the users or global groups that have to be added to the local group. |
| Overwrite if group already exist | Select this option, if you wish to overwrite the group definition, if one with the same name exists. |

If you wish to add more groups or to perform another action, click **Add More Actions** button and continue. The values gets added to the **List of Settings** table.

### Delete Group

To delete a group from the computer, select the **Delete Group** link from the Choose Group Action table and specify the group name that has to be deleted.

If you wish to delete more groups or to perform another action, click **Add More Actions** button and continue. The values gets added to the **List of Settings** table.

### Modify Group

To modify a group of the computer, select the **Modify Group** link from the Choose Group Action table and specify the group name that has to be deleted.

| Parameter | Description |
|---|---|
| Group Name | The name of the group that has to be modified. |
| Description | The description of the group. |
| Add Member | Select the Member Type as Local, Domain User, or Domain Group and specify/select the users or global groups that have to be added to the local group. |
| Remove Member | Select the Member Type as Local, Domain User, or Domain Group and specify/select the users to be removed from this group. |

If you wish to modify more groups or to perform another action, click **Add More Actions** button and continue. The values gets added to the **List of Settings** table.

To modify a setting from the **List of Settings** table, select the appropriate row and click ![](https://www.manageengine.com/products/desktop-central/help/images/modify.jpg) icon and change the required values.

To delete a setting from the **List of Settings** table, select the appropriate row and click ![](https://www.manageengine.com/products/desktop-central/help/images/delete.jpg) icon.

## Step 3: Define Target

Using the [Defining Targets](https://www.manageengine.com/products/desktop-central/help/defining_targets.html#Defining-Configuration-Target-Computers) procedure, define the targets for deploying the Group Management Configuration.

## Step 4: Deploy Configuration

Click the **Deploy** button to deploy the defined Group Management Configuration in the targets defined. The configuration will take effect during the next system startup.

To save the configuration as draft, click **Save as Draft**.