primary group

  • Thread starter Thread starter Brandon McCombs
  • Start date Start date
B

Brandon McCombs

Does anyone know what determines whether I can set an existing group in
ADS under win2k3 as a primary group? I'm experimenting with some things
on a test domain and added a test account to schema admins, enterprise
admins, etc. and noticed that only when I selected certain ones could I
set them to be the account's primary group. What determines that?

thanks
Brandon
 
Brandon McCombs said:
Does anyone know what determines whether I can set an existing group in
ADS under win2k3 as a primary group? I'm experimenting with some things on
a test domain and added a test account to schema admins, enterprise
admins, etc. and noticed that only when I selected certain ones could I
set them to be the account's primary group. What determines that?
Click to expand...

I don't know.

Usually the primary group is Domain Users, but that is not fixed
or mandatory.

Why would you care about primary group?
 
Herb said:
I don't know.

Usually the primary group is Domain Users, but that is not fixed
or mandatory.

Why would you care about primary group?
Click to expand...

Well, if you must know, I'm building an LDAP client that interfaces with
multiple directories (one of which is ADS) using Java and I wanted to
replicate functionality given to administrators by the default tools but
I wasn't sure what pattern there was for the primary group as far as
what allowed you to set a user's primary group to a specific security
group. But anyway, there is a more important reason that someone, not
me though, could need to care about primary groups (whether it's in my
app or the default ADS tools) and that is, as the text notes in the ADUC
GUI, if you have Mac or POSIX compliant clients then you will need to be
able to set a primary group for users. In order to support that ability
in my app I do have to care about it for the first reason given (to
incorporate into my application properly).
 
Joe said:
Global or Universal groups in the same domain as the user.
Click to expand...

thanks, that's what I was looking for. I also was able to then find a
pattern of specific sAMAccountType values that corresponded to the
different types of groups.
 
Back
Top