You can add and remove users from Active Directory groups to set SQL Server instance and database access permissions. Groups allow you to assign and manage access permissions for multiple users more efficiently. You can use Active Directory Domain Services to manage an AD group on a domain controller machine.
To add or remove users from a group in Active Directory, do the following:
1. On the domain controller machine, start Active Directory Users and Computers.
2. In the left navigation pane, expand the domain, then click on Users. The list of current users and groups appears.
3. Double-click on a group to open the Properties window.
4. In the properties window, click on the Members tab to display the list of users in the group.
5. Modify the group membership as follows:
◦ To add a user, click Add..., enter an active directory user name, and then click OK.
◦ To remove a user, select a user from the list, and then click Remove.
6. Click OK to confirm your changes to the group.
7. Synchronize the group changes with SQL Server using Model Explorer. For more information, see
You must log off and log in for group membership changes to take effect.
