group_distinguishedname
group distinguishedname
- (
is|is not) literal name - (
like|not like) wildcard expression - (
matches|not matches) regular expression
Purpose
Warns when the specified AD group's distinguished name does not match the specification.
Notes
This requirement may be repeated in the same section.
Why this requirement might be used
- AD object naming standards in your unit/college/project were likely established because such standards clearly identify what AD objects are to humans. This requirement can warn IT professionals about non-compliance with those naming standards.
- Matching components of a DN can help one identify that an AD object was created in the wrong OU.
Example configuration
# Warn if the group DN is not like the wildcard string "*MyUnit All Users*".
[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group distinguishedname like *MyUnit All Users*
Example output
Line 8: 4 AD groups with distinguished names that are not like “*MyUnit All Users*”:| Group object GUID | Group name | Group sAMAccountName | Distinguished name |
|---|---|---|---|
| 2515e8a0-1f1c-41f4-9139-eebc07ab2dc1 | Field Consultants | Field Consultants | CN=Field Consultants,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu |
| d962fe33-6501-45fd-a686-962f49481e7b | Field Services OU Admins | Field Services OU Admins | CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu |
| f79cefc3-ac3c-4993-aab7-759d661ccfeb | Tech Services FC TechOps | FCTechOps | CN=Tech Services FC TechOps,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu |
| 03efc439-b0dc-4615-afed-646fd22dfe34 | FC-Unix | FC-Unix | CN=FC-Unix,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu |
group_distinguishedname.txt · Last modified: by 127.0.0.1