AD Users Group Memberships

Rule description

This rule queries Active Directory for user accounts according to the Query Criteria and then returns the groups to which those users directly belong.

When to use this rule

Use this rule to get to the report about which groups the user accounts directly belong.

It is possible to customize the report to display only those attributes of users and groups you want to see

NOTE: If the rule encounters a user who is a member of one or more groups from unmanaged (excluded) domains, it will skip over groups from unmanaged domains when listing the groups of which the user is a member. In the rule output, UNMANAGED DOMAIN will be written in the Group name and Group DN columns for any groups from unmanaged domains.

Rule settings

Query settings

NOTE: There are common query settings, available for every rule that queries for Active Directory user accounts. For the information about core query settings, please refer to the following article: AD Users.

Settings specific to this rule

Output section

This section defines the output format of this rule.

To get more information about this section, please see the Rule Output section article.

Enforce/Schedule section

This section defines the schedule for how often to run the rule.

To get more information about this section, please see the Rule Enforce/Schedule section article.