Case Scenario: Update Active Directory Groups

Case Scenario:

Update Active Directory Groups - Set New Group Memberships on Existing User Accounts

Introduction

This case discussed the project of updating existing Active Directory user accounts, remove all existing group memberships for local, global, universal and distribution groups, and apply new group memberships based on the type of user (i.e. sales or marketing).

Requirements

• User Management Resource Administrator 6.0 or later
• A CSV formatted text file containing the username (sAMAccountName) (see below on this page)
• Additional seperate columns in the CSV file which contain user role information
• The example project - contact Tools4ever to obtain this project

Environment

The environment involves a mid-size company with 1 central domain (mycompany.com), 1 central domain controller running Windows 2003 (DC01), 1 file server running Windows 2000 (FILESRV01) and one database server running SQL Server 2000. The domain currently hosts 500 users. Recently MyCompany has performed a thorough security review and decided to implement a new Active Directory group membership structure to maintain better control over file security. The new group structure is based on combinations of job functions, such as sales or marketing and items such as manager or staff.

Problem

Human Resources department has given you an Excel spreadsheet containing the employee details such as first name, last name and also username. The spreadsheet also contains information which identifies the role of the user within the company using 2 seperate columns. Based on the information in these 2 columns, a set of groups must be assigned to the user account.

Solution Guide

This case scenario offers the project needed to automatically update all user accounts matched from the CSV input file, remove all existing group memberships and set new group memberships according to MyCompany rules, based on the role of the user within the company. This project includes special mapping actions to configure the mapping of role information from the CSV file to the actual group(s) in Active Directory.

• Click here to continue running your project in User Management Resource Administrator

Need help?

We are always available to assist you in building or configuring projects. Please contact us to see find out how we can help you.

CSV: The contents of a CSV file are similar to:
Lastname,Firstname,Location
Smith,John,Main Office
Turner,Kathy,Main Office
McBride,John,Sales Office