Group Naming Conventions (2023)

Ask a question

Search related threads

  • Remove From My Forums

Answered by:

Archived Forums 601-620

>

Directory Services

  • Question

  • Group Naming Conventions (1)

    1

    Sign in to vote

    Hi

    I am just trying to come up with a good naming convention for my groups in AD but i am struggling to think if my "components" of the group name are sensible or not, could do with some examples really of what others use to name their groups to check if i'm on the right lines. i have been making some notes from various other sites and this is what i have so far for our company:

    A Group name is comprised of the following sections:

    • 2 letter prefix which denotes group scope
    • 3 letters which denotes Group Type
    • 3 letters - Management Rule (such as ACL) usually used with DL scopes
    • Role name (such as Accounts or Sales) usually used with GL scopes
    • Access level (such as Read, Modify, Full Controll) usually used with DL scopes

    so for example, DL-SEC-ACL-SALES-READ, this means Domain Local, Security group, applied to ACLs for the Sales team, read only.

    i have some other "group types" such as; Security, Distribution, Delegate, Group Administrators, Application Admins.

    does my convention make sense? could someone provide some examples of how they name their groups so i can see if im on the right tracks?

    many thanks

    Steve

    • Moved by Pierre Audonnet [MSFT]Microsoft employee Thursday, January 7, 2016 4:34 PM From ADFS

Answers

  • Group Naming Conventions (3)

    1

    Sign in to vote

    Hi Steve,

    You could apply any naming strategy that works for your organization, as long as group names provide enough information to distinguish them from other groups. A common approach is to create a security group naming standard that organizes groups according to the business structure of your organization. In this way, group names are composed of labels that represent your company’s organization, such as division, department, team, and task.

    Here is an article regarding defining a security group naming, you could refer to it:

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Wendy Jiang Wednesday, January 13, 2016 8:15 AM
    • Marked as answer by Mahdi Tehrani Thursday, January 21, 2016 4:12 AM

    Monday, January 11, 2016 8:26 AM

  • Group Naming Conventions (5)

    Sign in to vote

    does my convention make sense? could someone provide some examples of how they name their groups so i can see if im on the right tracks?

    Well I follow a different approach. You need to find yourself an approach which meet your comfort as well. I have been in environments with no much security concerns where I used names like "THR-IT". In this example I Used "THR" for the city (in this case "Tehran") and "IT" for the department of the users in it. Also in some scenarios, security is a concern in which I mostly used codes instead of letters. Consider "01005-R" as an example in which 010 is used to point to "Dubai" and 05 as IT department and "R" as "Helpdesk Administrators".

    There are many other naming conventions out there but I believe you need to find the most appropriate one according to your needs and organizational policies .

    Mahdi Tehrani | Group Naming Conventions (7) | www.mahditehrani.ir
    Please click on Propose As Answer or Group Naming Conventions (8) to mark this post asGroup Naming Conventions (9) and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.

      • How to query members of 'Local Administrators' group in all computers?
    • Proposed as answer by Wendy Jiang Wednesday, January 13, 2016 8:15 AM
    • Marked as answer by Mahdi Tehrani Thursday, January 21, 2016 4:12 AM

    Thursday, January 7, 2016 4:46 PM

  • > does my convention make sense?

    Yes it does - if it works for you, it definitely does. Generally I agree

    with Mahdi that naming conventions are an individual thing for each

    organization. But you absolutely SHOULD have conventions and - of course

    :) - adhere to them.

    • Marked as answer by Mahdi Tehrani Thursday, January 21, 2016 4:12 AM

    Friday, January 8, 2016 12:56 PM

All replies

  • Group Naming Conventions (12)

    Sign in to vote

    does my convention make sense? could someone provide some examples of how they name their groups so i can see if im on the right tracks?

    Well I follow a different approach. You need to find yourself an approach which meet your comfort as well. I have been in environments with no much security concerns where I used names like "THR-IT". In this example I Used "THR" for the city (in this case "Tehran") and "IT" for the department of the users in it. Also in some scenarios, security is a concern in which I mostly used codes instead of letters. Consider "01005-R" as an example in which 010 is used to point to "Dubai" and 05 as IT department and "R" as "Helpdesk Administrators".

    There are many other naming conventions out there but I believe you need to find the most appropriate one according to your needs and organizational policies .

    Mahdi Tehrani | Group Naming Conventions (14) | www.mahditehrani.ir
    Please click on Propose As Answer or Group Naming Conventions (15) to mark this post asGroup Naming Conventions (16) and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.

      • How to query members of 'Local Administrators' group in all computers?
    • Proposed as answer by Wendy Jiang Wednesday, January 13, 2016 8:15 AM
    • Marked as answer by Mahdi Tehrani Thursday, January 21, 2016 4:12 AM

    Thursday, January 7, 2016 4:46 PM

  • Group Naming Conventions (17)

    Sign in to vote

    > does my convention make sense?

    Yes it does - if it works for you, it definitely does. Generally I agree

    with Mahdi that naming conventions are an individual thing for each

    organization. But you absolutely SHOULD have conventions and - of course

    :) - adhere to them.

    • Marked as answer by Mahdi Tehrani Thursday, January 21, 2016 4:12 AM

    Friday, January 8, 2016 12:56 PM

  • Group Naming Conventions (19)

    Sign in to vote

    I understand what you're both saying, but at the moment I am not sure if this will work for me or not. the existing structure really has no conventions whatsoever, barely any groups and hundreds of users. I was hoping for a few examples for names of groups which you guys put on folder ACLS, or belong to local server groups, or group people in for management purposes, access to remoteapps etc just to see if I am on the right tracks and spark some ideas for myself if possible.

    thanks

    Steve

    Friday, January 8, 2016 6:34 PM

  • Group Naming Conventions (21)

    1

    Sign in to vote

    Hi Steve,

    You could apply any naming strategy that works for your organization, as long as group names provide enough information to distinguish them from other groups. A common approach is to create a security group naming standard that organizes groups according to the business structure of your organization. In this way, group names are composed of labels that represent your company’s organization, such as division, department, team, and task.

    Here is an article regarding defining a security group naming, you could refer to it:

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by Wendy Jiang Wednesday, January 13, 2016 8:15 AM
    • Marked as answer by Mahdi Tehrani Thursday, January 21, 2016 4:12 AM

    Monday, January 11, 2016 8:26 AM

Top Articles
Latest Posts
Article information

Author: Prof. An Powlowski

Last Updated: 27/06/2023

Views: 6144

Rating: 4.3 / 5 (44 voted)

Reviews: 91% of readers found this page helpful

Author information

Name: Prof. An Powlowski

Birthday: 1992-09-29

Address: Apt. 994 8891 Orval Hill, Brittnyburgh, AZ 41023-0398

Phone: +26417467956738

Job: District Marketing Strategist

Hobby: Embroidery, Bodybuilding, Motor sports, Amateur radio, Wood carving, Whittling, Air sports

Introduction: My name is Prof. An Powlowski, I am a charming, helpful, attractive, good, graceful, thoughtful, vast person who loves writing and wants to share my knowledge and understanding with you.