How to get a complete group membership list of a user including Security and Distribution Groups using bv-Control for Windows

Article:TECH195227  |  Created: 2012-08-20  |  Updated: 2012-08-20  |  Article URL http://www.symantec.com/docs/TECH195227
Article Type
Technical Solution


Environment

Issue



When we run a query using 'Users' datasource for Effective Group Membership, the query returns only Security Groups and no Distribution Groups are listed, that the User is a member of. How to get a complete group membership list of a user including Security and Distribution Groups using bv-Control for Windows.


Solution



The User query for Effective Group Membership by default lists only to Security groups and not the Distribution Groups. You can get a complete list of group memberships for users using either of the methods below.

Method 1:

  1. In the RMS Console, launch the query building wizard by clicking the Red Book icon on the toolbar.
  2. Expand bv-Control for Windows and select the Users data source.
  3. On the Field Specification tab select String List Attribute <LIST>.
  4. A Descriptor window pops up. Click Change Descriptor.
  5. Expand Advanced Descriptor and choose Enter a StringList attribute
  6. Type memberOf   (Note: This field is case sensitive)
  7. Click OK
  8. Filter by a specific user name if you need information for a specific user
  9. Next select the Scope tab, scope to the desired location.
  10. Click OK.
  11. Click Run and View as Grid.

It gives the canonical names of the groups a user is a member of including distribution groups.

Method 2:

Note:  This method won't work if you want information for ALL users in the domain.

  1. In the RMS Console, launch the query building wizard by clicking the Red Book icon on the toolbar.
  2. Expand bv-Control for Windows and select the Groups data source.
  3. On the Field Specification tab select Domain Name and Group Name.
  4. In the Filter Specification tab choose ‘Group members as name' and choose operator CONTAINS
  5. Enter the user for whom the membership information is required. You can choose 'Prompt User' to supply this information at runtime.
  6. Next select the Scope tab, scope to the desired location.
  7. Click OK.
  8. Click Run and View as Grid.



Article URL http://www.symantec.com/docs/TECH195227


Terms of use for this information are found in Legal Notices