I am trying to solve this problem below and need some help.
I will name these example groups as-follows:
ADgrp-Dynamic is a dynamic group. It includes user objects with certain attributes.
The other two groups are regular AD groups where the membership is manually managed. Their purpose is to apply manual membership changes to the dynamic group. I would like any members of the "include" group to be added to the dynamic group - dynamically. I would like to ensure that anyone in the "exclude" group is NOT a member of the dynamic group, if they would normally be a member based on the dynamic rule.
What I've tried - Salaried/ExceptionHourly employees with enabled accounts, OR statically included users, AND the user is not excluded. This doesn't work:
I have also tried leaving off the bottom two lines and adding the groups to their respective columns in the include/exclude tab, which also does not work.
I think that my query for the user being a member of, or not a member of the include/exclude groups doesn't work.
How should I be doing this?
Please sign in to leave a comment.