AD Security Groups

Usage and Config
1

(imported topic written by herrm91)

Is there a way to target Active Directory Security Groups?

I am looking to deploy software based on workstations based on their AD group membership.

I know I can target OU’s, but I want to target the Global Security Groups within the OU.

Thanks

2

(imported comment written by BenKus)

Hi herrm,

WMI can do this for you, but you have to use of caution to avoid overwhelming your domain controllers…

This is something to try:

string values of selects (“DS_MemberOf from DS_Computer where DS_Name=’” & computer name & “’”) of wmi “root\directory\ldap”

If you decide to use something like this, please be cautious and note any abnormal load on the domain controllers… Also, probably you should set this to evaluate once per day…

Ben

3

(imported comment written by cstoneba)

I don’t get any results back when I run it in QnA. Does it work for everyone else?