Create an Application Group within an Authorization Store

Applies To: Windows Server 2008


Authorization Manager is available for use in the following versions of Windows: Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows XP, Windows Vista, Windows 7, and Windows 8. It is deprecated as of Windows Server 2012 R2 and may be removed in subsequent versions.

Before you can effectively use Authorization Manager to control access to resources, you must define groups of users. To define an application group, use the following procedure.

You must be assigned to the Authorization Manager Administrator user role to complete this procedure. By default, Administrators is the minimum Windows group membership assigned to this role. Review the details in "Additional considerations" in this topic.

To create a group within an authorization store

  1. If necessary, open Authorization Manager

  2. In the console tree, right-click Groups, and then click New Application Group.

  3. In the New Application Group dialog box, in Name, type a name for the group.

  4. In Description, type a description for the group.

  5. In Group type, click Basic Application Group or LDAP Query Application Group or Business Rule Application Group. (For more information about the types of groups you can create, see "Additional references" in this topic.)

  6. Click OK.

Additional considerations

  • To perform this procedure, you need to have access to an authorization store. By default, members of the Administrators group have the required access, but Authorization manager allows you to delegate responsibility.

Additional references