Objective
Following these instructions will enable an IT Support Staff member to create a new group using Quest ActiveRoles.
Environment
Quest ActiveRoles
CampusAD
Before You Begin
N/A
Steps
Login to the Quest Active Roles Server Management Tool
Once authorized, unit administrators can login to the Quest Active Roles Server Management Tool at: https://ars.campusad.msu.edu/MSUAdmin (link) using their CampusAD login.
The Web Interface home page appears.
Directory Management for Units
On the Web Interface Home Page, select Directory Management (alternately, on the Navigation Bar select Directory Management > Active Directory).
This displays a listing of the contents of the Active Directory folder (which may include objects such as domains, organizational units and containers).
Navigate to your Organizational Unit, Select Type of Group
On the vertical Tree tab, click the [+] symbol to the left of campusad.msu.edu to expand its contents, then click on the name link of the desired Organizational Unit (for example, IT Services ), and select the Groups Folder.
In this example, IT Services is used for the Organizational Unit. Organizational Units may split their groups into different organizational folder structures to make management easier. Common primary group names are Distribution, Security, and Resource. Departments, however, can organize this differently if they choose to do so. The example below shows the Distribution primary group, which has already been created.
Click the Distribution link before continuing to create a New Group. Depending on the way in which you've chosen to organize your folder structure, be sure to open the appropriate Groups directory for creating your new group.
Create a New Group
Once the primary group link is selected, click the vertical Menu tab and then select New Group to create a Distribution Subgroup. As an example, the new group will be created within a folder path location such as Active Directory/campusad.msu.edu/ITServices/Groups/Distribution).
Set New Group Preferences
When creating groups there are two group types required with the following options:
- Group Scope
- Domain Local (just for the CampusAD domain)
- Global (with a forest)
- Universal (cross forests)- required for mail enabled groups
- Group Type
The example below depicts the creation of a Universal Distribution Group. Due to the fact that CampusAD is a single domain within a single forest, creating group branches in Exchange requires any group that is mail-enabled (for either the Distribution or Security Group types), the Universal Group Scope is required.
- In the Name field, enter the group name in the text box.
- In the Group scope section, select the appropriate option (for example, Universal).
- In the Group type section, select the appropriate option (for example, Distribution).
- Click Next to continue to Complete Group Creation.
Naming Convention Note: The rule should begin with the organizational unit exactly as it appears in the tree (case sensitive), followed by a period, and then your group name. In our example here we are creating a group called, 'ITServices.SpartanGroup'
Verify New Group
Check the Create an Exchange mailbox option when a new, associated Exchange mailbox is necessary for the Group.
The Alias and Mailbox database fields are automatically populated with the correct alias name and mailbox store if selected.
Click Finish to verify the new group.
New Group Creation Details
Fill in any additional information you want to add for the New Group and then click Save.
Search Members
After you have created the group you will need to add members to it.
- Click Members with the vertical Menu tab open.
- Click +Add in the right display pane.
Add Members
When the Search Object window appears. Type the name of the person you wish to add in the "Name field, then click Search. A list of names matching what you put in the "Name" field will appear. When the results are displayed, click on the persons name you wish to add to the group. You may repeat this step until you have added all desired members. As you add members they will appear on the bottom of the screen. When you are finished, click OK.
- Enter the member in the name box.
- Click Search for the system to find the object.
- Click the member name link to hold the name you wish to add to the group.
Repeat the first 3 steps if necessary to search for additional members.
- Highlight all members at the in the bottom pane and click OK to confirm selection.
After clicking OK the distribution list will to populate the folder fields.
Confirm/Update Group Members
Click on the member name link of the member to modify the settings for adding, removing, and temporary/access for group members.
Additional Info
N/A