Inside Activate
Activate and Active Directory
Active Directory Primary Group
2 min
active directory has a concept of a primary group this is a special group that user objects are members of this is 'domain users' by default and should not be changed the following information is from msdn ( http //technet microsoft com/en us/library/cc776334(v=ws 10) aspx ) the user's primary group applies only to users who log on to the network through services for macintosh or to who run posix compliant applications unless you are using these services, there is no need to change the primary group from domain users, which is the default value setting the user's primary group membership to a value other than domain users may adversely impact performance as all users in the domain are members of domain users if the user's primary group is set to another group, it may cause the group membership to exceed the supported maximum number of members the primary group information is not stored in the 'members' attribute of the group a seperate attribute 'primarygroupid' is used instead that contains the rid of the group activate and primary groups activate does not use primary groups and does not read or use the primarygroupid attribute for group membership only users in the groups 'members' parameter will be included in the group 'domain users' is the default value and should not be changed 'domain users' (or any group that is used as a users primary group) cannot be used for dynamic roles or reporting purposes the users primary group cannot be used in activate for roles and the users will not be classed as part of this group for the purpose of caching information or reporting