Group security type is a proprietary feature of Imanami’s GroupID which lets you define membership permissions for a group so that you can control the way users join or leave a group. There are three group security types available:
Public: Anybody can freely join or leave a group.
Private: Only group admins can add or remove users from a group.
Semi-Private: Users can request to join or leave a group which must be approved by group admins.
By default, GroupID assigns “Private” i.e. closed membership security type to the following groups.
§ All the existing groups in Active Directory which were/are created directly in active directory.
§ All the groups created through Automate or Self Service (Unless you explicitly change the security type)
Since most of the groups in Active directory are set to private security type when GroupID is introduced to the system, you might like to bulk change the security type of the groups. However, this bulk change must be contained. We received a similar request from one of our respected clients and here is how we achieved it.
We would like to change the security type of all the groups which meet the following criteria from Private Closed Membership to Semi-Private.
Desired Evaluation Criteria
§ Groups must be a day old.
§ Groups must be in a specific OU.
§ Groups must be of a distribution group type.
We wrote a script to achieve the requirement.
The following image explains the commandlets in the scripts and what they accomplish.
The highlighted parameters can be changed to suite the environment and requirement.
Steps to Execute
First of all, copy the following script to a notepad file and make the desired adjustments.