The next page prompts you to specify the type of objects, such as User or Computer, to be managed by Group Family. In this way, the scope of the Group Family is limited to objects of a certain type. The scope can be further refined by applying a filter in order for the Group Family to manage only those objects that meet certain property-related conditions.
Figure 97: Selection of managed objects
You can select the type of objects you want the Group Family scope to include:
- User The Group Family scope only includes user accounts.
- Group The Group Family scope only includes groups. Note that with this option the Group Family creates groups and adds existing groups to the newly created groups.
- Contact The Group Family scope only includes contact objects.
- Computer The Group Family scope only includes computer accounts.
- Other The Group Family scope only includes the directory objects of the type you select. Click Specify and select an object type.
You have the option to further refine the Group Family scope by applying a filter. To do so, click Filter. This displays a window where you can view or modify filtering criteria. The label next to the Filter button provides a visual indication of whether any filtering criteria are specified.
In the Filter window, you can set up a list of filtering criteria, also referred to as conditions. Each condition specifies a property, operator and value, and evaluates to either TRUE or FALSE depending on the actual value of the property. For example, the following condition evaluates to TRUE for any object that has Description set to Full Time Employee:
Full Time Employee
If any conditions are specified, a filter is applied so that the Group Family scope only includes the objects for which all conditions evaluate to TRUE.
With an empty list of conditions, the Group Family scope includes all objects of the specified type held in the specified containers. In other words, this results in no filtering being applied.
When you apply a filter, only the objects that meet the filter conditions are added to the controlled groups. By default, no filter is applied, which causes the controlled groups to include any objects of the specified type. You can configure a basic filter by selecting properties and specifying conditions and values to search for on the selected properties.
In addition, you have the option to configure an advanced filter by entering an appropriate LDAP query. To do so, click the Advanced button in the Filter window. Note that the basic and advanced filter options are mutually exclusive. If you have applied an advanced filter, the basic filter settings are disregarded. To return to the basic filter option, click the Basic button in the Filter window—this will override the LDAP query that the advanced filter is based upon.
By clicking Preview on the Selection of Managed Objects page, you can display a list of objects currently included in the Group Family scope. The Preview window lists the objects the Group Family is going to assemble into groups.