cancel
Showing results for 
Search instead for 
Did you mean: 
liorf
Not applicable
Report Inappropriate Content
Message 1 of 7

AD connector - groups mapping

Hi

If I have two groups in same OU in Active Directoy, Can I map every one of them to a diffrent group in the EEM?

Lior

6 Replies
peter_eepc
Not applicable
Report Inappropriate Content
Message 2 of 7

Re: AD connector - groups mapping

What "two groups" you have in the same AD OU? Groups of what?

You may create two separate connectors for the same AD OU if you use different name attribute in each of them (to avoide name duplicates in database). Technically possible, but I'm not sure what practical purpose would that serve.

liorf
Not applicable
Report Inappropriate Content
Message 3 of 7

Re: AD connector - groups mapping

Hi

I have two diffrent global groups in the same OU, I want to map every one of them to anther user group in the EEM.

Do I have to use two connectors?

for example:

OU_ABC

       GlobalGroup_A ->> to be mapped togroup A in EEM

       GlobalGroup_B ->> to be mapped togroup B in EEM

Thanks

Lior

peter_eepc
Not applicable
Report Inappropriate Content
Message 4 of 7

Re: AD connector - groups mapping

Yes. Because you can define more precise object filter only at connector level. And you would need that, if you want special object filtering that is not related to OU selection alone.

Cleaner approach would be to separate AD groups with different OU's, though.

liorf
Not applicable
Report Inappropriate Content
Message 5 of 7

Re: AD connector - groups mapping

As far as I know, the user object need to be in the same OU where the group,

so if I have the Account users that in AccountOU, and I want to use two groups,

I have to use two connectors.

so , the cleaner approach is not so helfull in this case.

Thanks

Lior

peter_eepc
Not applicable
Report Inappropriate Content
Message 6 of 7

Re: AD connector - groups mapping

But can you create sub-OU's for separate AD groups?

Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 7 of 7

Re: AD connector - groups mapping

mappings are based on what's in the users object itself, so open the user in something like LDAP Browser, and then look at the attributes.

you can use any of them to make a mapping.

for groups, it's a MemberOf attribute that you would use - it does not matter where the group is, only that the user record has an attribute linking to it.

McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.