The following additional properties are mapped for groups with the POSIXGROUP object class.
Property | Description |
---|---|
GID number |
Group ID in the domain. |
The following additional properties are mapped for groups with the POSIXGROUP object class.
Property | Description |
---|---|
GID number |
Group ID in the domain. |
There are different assignments to groups possible depending on the construction of the domain structure and the domain trusts. You can find more exact information about permitted group memberships in the documentation for your Windows Server.
Ensure the following if you want to map group memberships using forests:
The trusted domains are known.
The name of the forest is entered in the domain.
In the following tables, the groups, user accounts, contacts, and computers permitted in One Identity Manager listed in groups.
Legend for the tables:
G = Global
U = Universal
L = Local
Target Group
|
Member in target group | |||||||||
---|---|---|---|---|---|---|---|---|---|---|
Group |
User account |
Contact |
Computer | |||||||
Distribution | Security | |||||||||
G | U | L | G | U | L | |||||
Distribution | Global | x | x | x | x | x | ||||
Universal | x | x | x | x | x | x | x | |||
Local | x | x | x | x | x | x | x | x | x | |
Security | Global | x | x | x | x | x | ||||
Universal | x | x | x | x | x | x | x | |||
Local | x | x | x | x | x | x | x | x | x |
Target Group
|
Member in target group | |||||||||
---|---|---|---|---|---|---|---|---|---|---|
Group |
User account |
Contact |
Computer | |||||||
Distribution | Security | |||||||||
G | U | L | G | U | L | |||||
Distribution | Global | x | ||||||||
Universal | x | x | x | x | x | x | x | |||
Local | x | x | x | x | x | x | x | |||
Security | Global | |||||||||
Universal | x | x | x | x | x | x | x | |||
Local | x | x | x | x | x | x | x |
Target Group
|
Member in target group | |||||||||
---|---|---|---|---|---|---|---|---|---|---|
Group |
User account |
Contact |
Computer | |||||||
Distribution | Security | |||||||||
G | U | L | G | U | L | |||||
Distribution | Global | |||||||||
Universal | ||||||||||
Local | x | x | x | x | x | x | ||||
Security | Global | |||||||||
Universal | ||||||||||
Local | x | x | x | x | x | x |
Target Group
|
Member in target group | |||||||||
---|---|---|---|---|---|---|---|---|---|---|
Group |
User account |
Contact |
Computer | |||||||
Distribution | Security | |||||||||
G | U | L | G | U | L | |||||
Distribution | Global | |||||||||
Universal | ||||||||||
Local | x | x | x | x | x | x | ||||
Security | Global | |||||||||
Universal | ||||||||||
Local | x | x | x | x | x | x |
Use this task to add a group to another group. This means that the groups can be hierarchically structured.
To assign groups directly to a group as members
In the Manager, select the Active Directory > Groups category.
Select the group in the result list.
Select the Assign groups category.
Select the Has members tab.
Assign child groups in Add assignments.
TIP: In the Remove assignments pane, you can remove the assignment of groups.
To remove an assignment
Select the group and double-click .
To add a group as a member of other groups
In the Manager, select the Active Directory > Groups category.
Select the group in the result list.
Select the Assign groups task.
Select the Is member of tab.
In the Add assignments pane, assign parent groups.
TIP: In the Remove assignments pane, you can remove the assignment of groups.
To remove an assignment
Select the group and double-click .
For domains from the functional level Windows Server 2008 R2 and above, it is possible to define additional password policies in addition to the default password policies. This allows individual users and groups to be subjected to stricter account policies as intended for global groups.
To specify account policies for a group
In the Manager, select the Active Directory > Groups category.
Select the group in the result list.
Select the Assign account policies task.
In the Add assignments pane, assign account policies.
TIP: In the Remove assignments pane, you can remove account policy assignments.
To remove an assignment
Select the account policy and double-click .
© ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center