Can Safeguard modify group membership in Active Directory or on local machines?
说明
Safeguard for Privileged Passwords has the ability to check and change passwords for local and directory accounts, is it able to perform other tasks in Active Directory or in local groups on a Windows server/workstation, such as adding or removing accounts from groups?
原因
No, Safeguard for Privileged Passwords cannot change or modify group membership, however it does have the ability to read group membership in order to perform account discovery.
解决办法
Active Roles, another product offered by One Identity, delivers automated user account and group management that overcomes the shortcomings of native Microsoft Active Directory and Azure Active Directory tools.