1. Open Services for UNIX Administration.
2. If necessary, connect to the computer you want to manage.
3. Click User Name Mapping.
4. Click the Maps tab, and then click Show Group Maps.
5. In the Windows domain name list, click the domain for which you want to list groups, and then click the List Windows Groups button.
6. If you are obtaining UNIX group information from a Network Information Service (NIS) domain, in the NIS Domain name box, type the name of the NIS domain from which you are getting account information. If the master server of the NIS domain is located on a different subnet than the User Name Mapping server, in the NIS Server name box, type the name of the master server.
7. Click the List UNIX Groups button.
8. In the Windows Groups and UNIX Groups lists, click the two groups you want to map to each other, and then click Add.
9. To save the settings, click Apply.

Notes

• To open Services for UNIX Administration, click Start, point to Programs, point to Windows Services for UNIX, and then click Services for UNIX Administration.
• As you add maps, new maps are listed below existing maps. This does not reflect the order in which the maps are evaluated, however. To view the actual order, click Apply, press F5 to refresh the User Name Mapping page, and then reopen the list of advanced maps. Primary maps are always listed and evaluated first, followed by secondary maps. To change the order in which maps are evaluated within the list of secondary maps, select a map and then click Move up or Move down to reposition the map within the list.
• You cannot create an advanced map for groups when administering a remote computer.

• At a command prompt, type:

  mapadmin [computername] [–u user] [–p password] add –wg WindowsDomain\GroupName –ug groupname [–setprimary]

Argument	Description
computername	The name of the computer you want to manage.
user	The name of the user who has administrative privileges on the computer, if different from the current user.
password	The password for the person who has administrative privileges on the computer, if different from the current user.
WindowsDomain\GroupName	The name of the Windows group.
–setprimary	Make this the primary mapping.
NTDomain\GroupName	The name of the Windows group.
groupname	The name of the UNIX group, specified as domain\groupname or domain@groupname, where domain is either the name of the Network Information Service (NIS) domain or PCNFS.

Notes

• The command-line method maps one pair of users or groups at a time. To map more users or groups, repeat the command.
• When you use mapadmin to create multiple maps for a UNIX group, use the –setprimary option to specify the primary map. If necessary, you can use the mapadmin setprimary command later to change the primary map.
• Maps cannot be evaluated in the order in which they are created. Primary maps are always evaluated before secondary maps. For information about how to view maps and and change the order in which secondary maps are evaluated, see Related Topics.
• You cannot create an advanced map for groups when administering a remote computer.