PSVR 2010 how to add all AD users in project security group
-
Tuesday, 10 April 2012 10:44 AM
Hello.
I work in a geographically distributed company with not the best channels of communication between the branches. At the head office is set up SharePoint 2010 and Project Server 2010.
Is it possible to add all domain users in project security group , without creating a new universal group?
The question arose, because is important to avoid overloading the channels because of caching universal groups between domain controllers.
Option sync with the group "All domain users" doesn't work, because the Project Server takes data from the property "memberof" object. The "All domain users" is generated dynamically, the property in this case is empty. Now in our domain there is no static group, which would include all the domain users.
All Replies
-
Tuesday, 10 April 2012 10:47 AM
Cancan4,
Is it possible to add all domain users in project security group , without creating a new universal group?
I don't think that is possible. To accomplish what you're looking for, you would need to create a new AD group that "rolls up"all the other AD groups/users that should get access to your system.
Also, as the whole security concept is really powerful and therefore relatively complex, you might want to have a look at this article which gives you a couple of things to think about in terms of planning for security etc.
http://technet.microsoft.com/en-us/library/cc197354.aspx
Hope this helps.
- Edited by shelldor23 Tuesday, 10 April 2012 10:48 AM
- Edited by shelldor23 Tuesday, 10 April 2012 10:49 AM
- Edited by shelldor23 Tuesday, 10 April 2012 10:50 AM
-
Tuesday, 10 April 2012 11:48 PM
Thanks for your answer.
Problem is that all AD groups in our domain, that consist many user are dynamic. Project Server don't add users from this groups, that is why I add the question.
Really, that big companies use universal group with explicit inclusion of users or static groups?
-
Wednesday, 11 April 2012 1:52 AMModerator
