RE: [ActiveDir] Adding Users to Security Group based on a Policy

[Ayers, Diane]

Title: Adding Users to Security Group based on a Policy

IMHO, I would look at a separate process that builds your groups on the fly based on specific attributes rather than a GPO.  We run a separate process that builds groups based on physical location and other attributes.  Easier to manage and less security risks from escalated privileges.  You can use the scripting tools of your choice or use some.  IIRC, there are tools in the E2K resource kit that can do pretty much what you need.

 

Any particular reason you want it in a GPO?

 

Diane

-----Original Message-----
From: Molloy, Gene S. [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 05, 2002 8:47 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Adding Users to Security Group based on a Policy

I would like to create a Policy that will automatically add users to a security group based on  a user attribute.

For example if user has an email address ending in abc.com put them in a group call abc users.

Any assistance on this would be greatly appreciate.

Gene Molloy