Solved

Dynamic group memberships

Posted on 2004-04-23
3
258 Views
Last Modified: 2010-04-19
I know Aelita makes a tool that allows for dynamic group membership.

Is there any others out there? or can it be scripted somehow?

What I want is the ability to have an ACL group that will give rights to a folder based on an attribute in their user account (such as location field). I want it to be dynamic, so that if I change the attribute it will remove them from the group and add them to the appropriate group.

Anyone?

0
Comment
Question by:TheCleaner
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
KingHollis earned 250 total points
ID: 10904204
TheCleaner,

Using ADSI scripting, you can do such a thing:
1. You would have to create the groups and give the groups the access you require.
2. You would have to write the ADSI script(s) that would run against members in the group(s) looking for the attribute. If the attribute was not present in the member then you would have your batch file make a call to another ADSI script to remove the member.
3. You would also have to create another ADSI script which would run against all members in your domain looking for the attribute. If found, your batch file would make another call to another ADSI script(s) to add the members to specific groups.
4. Then you would either manually run these batch files or schedule them with the proper authority.

Sounds complicated, but it isn't really. It's just teduious and time consuming and will require you to become a bit familiar with ADSI scripting-- which you should because there are a lot of cool things admins can do without having to know a whole lot about programming. Otherwise, this is why Aelita gets paid the big bucks!
0
 
LVL 23

Author Comment

by:TheCleaner
ID: 11059280
KingHollis,

Thanks for the information.  We decided the Aelita product was well worth it in the long run, so that's the direction we went.

Thanks for your help though...points awarded, and a B grade given...
0
 
LVL 10

Expert Comment

by:KingHollis
ID: 11062511
TheCleaner,

Aelita makes good stuff, so definitely not a bad move.
Thanks for your consideration and best of luck!
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question