?
Solved

Dynamic group memberships

Posted on 2004-04-23
3
Medium Priority
?
260 Views
Last Modified: 2010-04-19
I know Aelita makes a tool that allows for dynamic group membership.

Is there any others out there? or can it be scripted somehow?

What I want is the ability to have an ACL group that will give rights to a folder based on an attribute in their user account (such as location field). I want it to be dynamic, so that if I change the attribute it will remove them from the group and add them to the appropriate group.

Anyone?

0
Comment
Question by:TheCleaner
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
KingHollis earned 750 total points
ID: 10904204
TheCleaner,

Using ADSI scripting, you can do such a thing:
1. You would have to create the groups and give the groups the access you require.
2. You would have to write the ADSI script(s) that would run against members in the group(s) looking for the attribute. If the attribute was not present in the member then you would have your batch file make a call to another ADSI script to remove the member.
3. You would also have to create another ADSI script which would run against all members in your domain looking for the attribute. If found, your batch file would make another call to another ADSI script(s) to add the members to specific groups.
4. Then you would either manually run these batch files or schedule them with the proper authority.

Sounds complicated, but it isn't really. It's just teduious and time consuming and will require you to become a bit familiar with ADSI scripting-- which you should because there are a lot of cool things admins can do without having to know a whole lot about programming. Otherwise, this is why Aelita gets paid the big bucks!
0
 
LVL 23

Author Comment

by:TheCleaner
ID: 11059280
KingHollis,

Thanks for the information.  We decided the Aelita product was well worth it in the long run, so that's the direction we went.

Thanks for your help though...points awarded, and a B grade given...
0
 
LVL 10

Expert Comment

by:KingHollis
ID: 11062511
TheCleaner,

Aelita makes good stuff, so definitely not a bad move.
Thanks for your consideration and best of luck!
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question