primary group

B

Brandon McCombs

Does anyone know what determines whether I can set an existing group in
ADS under win2k3 as a primary group? I'm experimenting with some things
on a test domain and added a test account to schema admins, enterprise
admins, etc. and noticed that only when I selected certain ones could I
set them to be the account's primary group. What determines that?

thanks
Brandon
 
H

Herb Martin

Brandon McCombs said:
Does anyone know what determines whether I can set an existing group in
ADS under win2k3 as a primary group? I'm experimenting with some things on
a test domain and added a test account to schema admins, enterprise
admins, etc. and noticed that only when I selected certain ones could I
set them to be the account's primary group. What determines that?

I don't know.

Usually the primary group is Domain Users, but that is not fixed
or mandatory.

Why would you care about primary group?
 
B

Brandon McCombs

Herb said:
I don't know.

Usually the primary group is Domain Users, but that is not fixed
or mandatory.

Why would you care about primary group?

Well, if you must know, I'm building an LDAP client that interfaces with
multiple directories (one of which is ADS) using Java and I wanted to
replicate functionality given to administrators by the default tools but
I wasn't sure what pattern there was for the primary group as far as
what allowed you to set a user's primary group to a specific security
group. But anyway, there is a more important reason that someone, not
me though, could need to care about primary groups (whether it's in my
app or the default ADS tools) and that is, as the text notes in the ADUC
GUI, if you have Mac or POSIX compliant clients then you will need to be
able to set a primary group for users. In order to support that ability
in my app I do have to care about it for the first reason given (to
incorporate into my application properly).
 
B

Brandon McCombs

Joe said:
Global or Universal groups in the same domain as the user.

thanks, that's what I was looking for. I also was able to then find a
pattern of specific sAMAccountType values that corresponded to the
different types of groups.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top