Manage Windows Local Groups | Computer Configuration
Windows local groups are a type of security group in the Microsoft Windows operating system. They are used to organize and manage user accounts and computer resources on a local computer or server. To put it shortly, local groups are a collection of different user accounts that share the same resources and have similar accessibility permissions.
Local groups are defined on a specific computer or server to grant permissions to resources such as files, folders, and printers. They can also be used to assign privileges to users and groups, such as the ability to log on locally, or to perform administrative tasks.
Local groups can also be created and customized to meet specific security requirements. For example, a local group might be created to provide access to a particular application or service, or to restrict access to specific files or folders.
The Group Management configuration allows you to add, modify, or delete local groups from the computers.
Step 1: Name the Configuration
Provide a name and description for the Group Management Configuration.
Step 2: Define Configuration
You can perform the following actions:
Add Group
To add a group to the computer, select the Add Group link from the Choose Group Action table and specify the following:
Parameter | Description |
|---|---|
Group Name | The name of the group that has to be created. |
Description | The description of the group. |
Add Member | Select the Member Type as Local, Domain User, or Domain Group and specify/select the users or global groups that have to be added to the local group. |
Overwrite if group already exists | Select this option, if you wish to overwrite the group definition, if one with the same name exists. |
Delete Group
To delete a group from the computer, select the Delete Group link from the Choose Group Action table and specify the group name that has to be deleted.
Modify Group
To modify a group of the computer, select the Modify Group link from the Choose Group Action table and specify the following:
Parameter | Description |
|---|---|
Group Name | The name of the group that has to be modified. |
Description | The description of the group. |
Add Member | Select the Member Type as Local, Domain User, or Domain Group and specify/select the users or global groups that have to be added to the local group. |
Remove Member | Select the Member Type as Local, Domain User, or Domain Group and specify/select the users to be removed from this group. |
If you wish to add more users or to perform another action, click Add More Action button and continue. The values get added to the List of Settings table.
- To modify a setting from the List of Settings table, select the appropriate row and click
and change the required values. - To delete a setting from the List of Settings table, select the appropriate row and click
.
Step 3: Define Target
Using the Defining Targets procedure, define the targets for deploying the Group Management Configuration.
Step 4: Deploy Configuration
Click the Deploy button to deploy the defined Group Management Configuration in the targets defined. The configuration will take effect during the next system startup.
To save the configuration as a draft, click Save as Draft.