Add domain users to a group of security groups via group policy

KMote

11/30/22, 7:52 PM

Is there a way to add domain users to a collection of security groups via group policy? We have some SSO groups that all employees share. Instead of tech support person having to manually add new user to each of these groups, we'd like to push them via GP. The reason is that sometime, our tech person would miss adding one or more of the groups during user creation.

2 + 1

active-directory

group-policy

security-groups

Semicolon

11/30/22, 8:37 PM

1. This is a training problem, and a failure of automation. The tech shouldn't be in a position to make this mistake. 2. Group Policy is not meant to (nor will it) directly modify Active Directory (or its Objects). -- It could certainly be used to deploy scripts or tasks that in turn modify AD Objects.

Score:0

Server

AutoGnome

12/2/22, 12:48 PM

You can nest security groups.

So, for example, if all of Department A's users need to be in 4 different groups you can add DepartmentA to Group1, Group2, Group3, and Group4.

Now all you have to do is add a user to DepartmentA and they will also be in Group1-Group4.

0 + 1

KMote

12/3/22, 4:19 PM

Thank you. I'll give it a go and see if that works.

Score:0

Server

Zoran Jankov

12/19/22, 7:39 PM

You should really take a look at Role Based Access Control concept. You can create security groups for certain jobs/roles and then nest those groups in hierarchy of nested groups where the top groups have access to resources, internet access, shared folders, VPN access, mail groups, access to various services and software and target to specific GPO policies. It is hard to initially set this up but later management of users is extremely simplified.

0 + 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Add domain users to a group of security groups via group policy

TH: เพิ่มผู้ใช้โดเมนในกลุ่มความปลอดภัยผ่านนโยบายกลุ่ม

RO: Adăugați utilizatori de domeniu la un grup de grupuri de securitate prin politica de grup

RU: Добавить пользователей домена в группу групп безопасности через групповую политику

VI: Thêm người dùng miền vào một nhóm các nhóm bảo mật thông qua chính sách nhóm

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.