Skip to main content

Hi,

 

Is it possible to have a seperate AD Service for Nested AD Groups?

 

I have an AD Group which i use for most forms, however i also have a Nested AD group within there which i want to use for a specific form only

 

Is it possible to create a seperate AD Service instance and then click the NestGroups flag to true, and then use that Smartobject within this new form to use for when i need to specifically use nested groups?

 

Thanks

 

P.S. Even when testing on the current AD User Service and setting ResolveNestedGroups to True, the tester tool only brings back the AD Groups direct users, not the nested group.... Why?

Hi Sharp


 


I think that you will not be able possible


 


What I would suggested is using a SQL Server Linked Server.


The try to Reference by putting LDAP into SQL, then surface the PROC in a Smartobject.


 


https://msdn.microsoft.com/en-us/library/aa772380(v=vs.85).aspx


http://blog.skufel.net/2012/01/how-to-use-sql-server-to-query-active-directory/


https://community.spiceworks.com/how_to/27494-create-a-sql-linked-server-to-adsi


http://www.sqlservercentral.com/Forums/Topic890278-149-1.aspx


 


P.S. Even when testing on the current AD User Service and setting ResolveNestedGroups to True, the tester tool only brings back the AD Groups direct users, not the nested group.... Why?


So, note on the above question this the ResolveNestedGroups entry is configured in the K2 Database.


 


Regards


Heinrich


Hi,

 

Got this sorted with K2 supports help.

 

Heres the jist of it in case anyone else needs this:

 

There are two settings in Workspace, one for NestedGroups and one for NestedUsers.

Set both to true, restart the k2 service and take a days holiday for everything to synchronise up.

 

Tested after having a tasty Costa coffee and it worked fine with the Nested AD Group.


Reply