So creating security groups is fairly straightforward.
I'm pretty sure everybody's familiar with the process,
but we're going to go through it here.
Here I am on a domain controller. You can do this, again, on a domain
controller or any workstation with the admin tools installed.
I'm going to open up the Active Directory Users and Computers
Management Console. Just very simply right‑click Users,
click New, and then Group. We'll provide a name. In this case, we'll
do our VPN Servers group first. And the Group type should be Security,
and the Group scope is really dependent on your requirements. We'll
use a global group scope here, but you can use universal groups if you choose.
And then I'll repeat the process for our NPS Servers and once again
for our VPN Users. And finally, for our VPN devices,
I'm going to use PowerShell to do that.
So let's open an elevated PowerShell command window. Simply right‑click on
the Start menu and choose Windows PowerShell (Admin). The PowerShell cmdlet
to use for creating a group is New‑ADGroup, and we'll provide a name for
the group as well, and we'll specify the scope of the group, in this case,
a domain global group.
We'll populate these groups once we're finished building out the infrastructure servers later.