cancel
Showing results for 
Search instead for 
Did you mean: 
liorf
Level 7
Report Inappropriate Content
Message 1 of 7

AD connector - groups mapping

Hi

If I have two groups in same OU in Active Directoy, Can I map every one of them to a diffrent group in the EEM?

Lior

6 Replies

Re: AD connector - groups mapping

What "two groups" you have in the same AD OU? Groups of what?

You may create two separate connectors for the same AD OU if you use different name attribute in each of them (to avoide name duplicates in database). Technically possible, but I'm not sure what practical purpose would that serve.

liorf
Level 7
Report Inappropriate Content
Message 3 of 7

Re: AD connector - groups mapping

Hi

I have two diffrent global groups in the same OU, I want to map every one of them to anther user group in the EEM.

Do I have to use two connectors?

for example:

OU_ABC

       GlobalGroup_A ->> to be mapped togroup A in EEM

       GlobalGroup_B ->> to be mapped togroup B in EEM

Thanks

Lior

Re: AD connector - groups mapping

Yes. Because you can define more precise object filter only at connector level. And you would need that, if you want special object filtering that is not related to OU selection alone.

Cleaner approach would be to separate AD groups with different OU's, though.

liorf
Level 7
Report Inappropriate Content
Message 5 of 7

Re: AD connector - groups mapping

As far as I know, the user object need to be in the same OU where the group,

so if I have the Account users that in AccountOU, and I want to use two groups,

I have to use two connectors.

so , the cleaner approach is not so helfull in this case.

Thanks

Lior

Re: AD connector - groups mapping

But can you create sub-OU's for separate AD groups?

Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 7 of 7

Re: AD connector - groups mapping

mappings are based on what's in the users object itself, so open the user in something like LDAP Browser, and then look at the attributes.

you can use any of them to make a mapping.

for groups, it's a MemberOf attribute that you would use - it does not matter where the group is, only that the user record has an attribute linking to it.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community