member type

is any of the following keywords: user or group in a comma-separated list

Purpose

Warns when AD group members do not match the specification. One or more keywords separated by commas can be listed.

Example configuration

[group:60a153ca-de40-4d88-88f8-ce116ce206a4 e8d265d0-5265-430c-8ec7-3d5f145a0a9c FCBusinessOffice "Field Services OU Admins" FieldConsultingAdmin PMO-FCAccess]
# group members should only be groups.
member type is group

Example output

Line 5: 3 group members of AD group “FC Search Committe” (object GUID 60a153ca-de40-4d88-88f8-ce116ce206a4) are not the expected type:

Member ObjectGUID	Member name (sAMAccountName)	Member is type	Expected member type
2e94658f-d1f4-4a9f-9633-5a194c05ab44	dsummer2 (dsummer2)	user	group
f6add692-a3f4-4b5d-8a5a-2cea7aea128e	lee400 (lee400)	user	group
bfa823b7-2b66-4dd6-87a3-0d802505ed7e	wislande (wislande)	user	group

Line 5: 3 group members of AD group “FC Unix Team” (object GUID e8d265d0-5265-430c-8ec7-3d5f145a0a9c) are not the expected type:

Member ObjectGUID	Member name (sAMAccountName)	Member is type	Expected member type
c61638f6-df78-4379-af3c-4b5b498b89c7	gulley1 (gulley1)	user	group
089cfc86-4448-40d5-8b59-1a9cbadff544	jabrwn (jabrwn)	user	group
499a2140-419e-41f0-9e25-ac040ed087da	kpointer (kpointer)	user	group

Line 5: 1 group member of AD group “FCBusinessOffice” (sAMAccountName “FCBusinessOffice”) is not the expected type:

Member ObjectGUID	Member name (sAMAccountName)	Member is type	Expected member type
1ed28fd4-1a0f-4436-8306-956c010fe511	sgorman (sgorman)	user	group

Line 5: 1 AD group member of “Field Services OU Admins” (sAMAccountName “Field Services OU Admins”) is not the expected type:

Member ObjectGUID	Member name (sAMAccountName)	Member is type	Expected member type
bfa823b7-2b66-4dd6-87a3-0d802505ed7e	wislande (wislande)	user	group

Line 5: 1 AD group member of “FieldConsultingAdmin” (sAMAccountName “FieldConsultingAdmin”) is not the expected type:

Member ObjectGUID	Member name (sAMAccountName)	Member is type	Expected member type
bfa823b7-2b66-4dd6-87a3-0d802505ed7e	wislande (wislande)	user	group

Line 5: 1 AD group member of “PMO-FCAccess” (sAMAccountName “PMO-FCAccess”) is not the expected type:

Member ObjectGUID	Member name (sAMAccountName)	Member is type	Expected member type
00133515-ad0e-41e9-ac2f-1dd233e1f031	tgagne (tgagne)	user	group