You can even create a "direct reports" dynamic group for people who report to the same manager.ĭevices can also be group members but you can't mix both users and devices in the same group. You can combine more than one attribute so, for example, the group members have to both be in the Finance department and be located in Brisbane, Australia. You might have a dynamic group for people who have the same department name or location specified in their user account. Using a query-based membership, when you update the attributes of a user or device they will be added to or removed from the dynamic groups that are now relevant to them, without you having to do any other steps. Apart from using some Active Directory automation scripting with VBScript instead of the GUI, each request was handled individually.įast forward to 2021 and as well as replacing those scripts with PowerShell, we can use dynamic groups to maintain the group members based on the attributes of those members. They were a small but busy team, handling both calls from users via the helpdesk and requests generated by HR. When I first started in IT, my large organization had an entirely separate "Data Security" team who were responsible for user management - adds/moves/deletes and password resets.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |