Importing AD Groups to MOSS 2007
We are currently running MOSS 2007 Enterprise and have a daily import scheduled to pull over all AD users. This works fine and the user's are pulled over appropriately. We now want to use existing AD groups but it doesn't seem like those are
getting pulled over along with the individual users.
Essentially, I want to be able to set an alert up which is sent to an existing AD access group. When setting up the alert, I can use the SharePoint address book to locate users but not AD groups. What do I need to do to get those AD groups to
come up in the address book?
November 2nd, 2010 12:52pm
You should use mail enabled security groups in AD. Moreover you have to add a group to SharePoint site collection/site/list permission group.Oleg
Free Windows Admin Tool Kit Click here and download it now
November 2nd, 2010 2:23pm
We are using mail enabled security groups in AD. I'm still not sure I understand how I would make this group available within SharePoint though.
November 2nd, 2010 2:35pm
Enter group name in "Send Alerts To" text box manually.Oleg
Free Windows Admin Tool Kit Click here and download it now
November 2nd, 2010 2:44pm
Sephiroth0327,
technically AD group is mapped to Sharepoint SPUser object. I.e. if you have AD group AllUsers then in Sharepoint you will have user with login name "membershiprovidername:AllUsers". This Sharepoint user will represent AllUsers AD group in Sharepoint
security system. I.e. you can use this mapped user in order to grant permissions on securable objects like SPWeb, SPFolder, SPListItem, etc - it means that those users which belong to AllUsers AD group will have these permissions. I hope it will clarify something
for youBlog - http://sadomovalex.blogspot.com
CAML via C# - http://camlex.codeplex.com
Graphs visualization in Sharepoint - http://spgraphviz.codeplex.com
November 2nd, 2010 3:22pm
Enter group name in "Send Alerts To" text box manually.
Oleg
This is the issue though. The AD groups are not recognized when I enter them manually, only actual users. Could there be an issue with the AD import where it is ignoring the AD groups? I figured this might be the issue from the beginning but
I am unsure how to correct it.
Free Windows Admin Tool Kit Click here and download it now
November 3rd, 2010 8:19am
Hi,
If you create an User Account or Security Group and then assign it the email address of the Group
you can do it.
I wish you every success in your important work.
Best regards,
David HM
November 4th, 2010 9:37pm