Managing OU Security Groups in Azure Active Directory

Manage security groups and members for Active Directory Organizational Units.

Add a Group

  1. Open the Start menu and search for:
    Active Directory Users and Computers
    Press Enter.
  2. Navigate to your OU.
  3. Click Action, then New, and then Group.
  4. Enter a name for the group.
    Note: IT Services strongly recommends that because group names are domain-wide, they start with the four-letter department code followed by a dash and the basic description. For example, within the domain, there can be a group named "wcob-techs" and another named "vcfa-techs," but only one named "techs."
  5. Keep the default Global Security options. Click OK.

Add Members

  1. Double-click on the group in AD Users and Computers. Click the Security tab, and click Add.
  2. Enter:
    gacl\UARKusername
    where UARKusername is the member's username. Click OK.
    Note: It might be necessary for a user to log out and log back in again to access group resources.
  3. Grant group access to a resource by choosing the object's Security tab and entering the group name as "gacl\groupname."

Remove Members

  1. Right-click the group and select Properties.
  2. In the Security tab, click the UARK username to remove.
  3. Click the Remove button. Click OK.