I like to know about this as well........

We have this working but there are a number of steps:

1. Update to the MR1 release of ServiceDesk - go to SIM and it should show you that there is an update for SD. This has a much better mechanism for selecting what you want to import or synchronize.
2. Go through your AD and make sure you have separate OUs for users, groups, etc.
3. In SD, go to Admin/AD Servers and either Add or Edit an AD Server. Enter the domain and elevated user details, select the option to auto-create users if that is what you want, the default group for new users and timezone. Click on Next and, if your domain and user details are correct, the next screen will give you the option to import/synchronize either your Whole Domain or Organization Units. Select the individual OUs you want to use and click Save.

It is best to try this with one or two OUs at the lowest level of your AD and then add others when you are happy.

I adjusted my config to the OUs that I want. Now, how do you remove all of the old users and groups that you don't want in the system?

Groups are easy to delete. Go to Admin/Users/Accounts/List Groups. You can delete any group from the action selection on the RHS of each group.

There is no easy way to delete users although this feature has been requested, see the request on the Altiris Knowledgebase site, https://kb.altiris.com/display/1/index.asp?c=&cpc=&cid=&cat=&catURL=&r=0.3393213 , and subscribe to be kept up to date.

The way I have removed users, which only works for a small number and they have no tickets against them, is to create a dummy user, which I call 'deleted.user', in SD. I then use the merge action to merge the user with my 'deleted.user'. This gives you a warning message that the user will be deleted and removes them from SD.

Hi!

We have groups and users and the same OU and cannot change that.
I would love to have a option to Disable groups when importing!

Thanks!

Is there anyway to NOT import groups?  I see some workarounds here but nothing that says 'do not import groups'.

I have so many groups that when I try to assign permissions, I don't have any of teh built in groups in the selction list.  All i have are the top 2000 imported groups from AD.

Hi All,

No theres is no wqy no filter group import.

I asked today to one of my customer to create SD groups in a dedicated OU: I do not think it's a problem. You create dedicated groups for SD and put them in a dedicated OU.
Next, you can use the tools I made to copy permissions and so on from on group to others:
AD sync without importing groups

Best regards,

Fabrice B M