group name

(is | is not) literal name
(like | not like) wildcard expression
(matches | not matches) regular expression

Purpose

Warns when the specified AD group's name does not match the specification.

Notes

This requirement may be repeated in the same section.

Why this requirement might be used

AD object naming standards in your unit/college/project were likely established because such standards clearly identify what AD objects are to humans. This requirement can warn IT professionals about non-compliance with those naming standards.

Example configuration

# Warn if the group name is not 'MyUnit All Users'.
[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group name is MyUnit All Users

Example output

Line 6: Found 4 AD groups with names that aren't “MyUnit All Users”:

Group object GUID	Group name	Group sAMAccountName
2515e8a0-1f1c-41f4-9139-eebc07ab2dc1	Field Consultants	Field Consultants
d962fe33-6501-45fd-a686-962f49481e7b	Field Services OU Admins	Field Services OU Admins
f79cefc3-ac3c-4993-aab7-759d661ccfeb	Tech Services FC TechOps	FCTechOps
03efc439-b0dc-4615-afed-646fd22dfe34	FC-Unix	FC-Unix

Example configuration

[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group name not matches FC

Example output

Line 8: 2 AD groups with names that match /FC/:

Group object GUID	Group name	Group sAMAccountName
f79cefc3-ac3c-4993-aab7-759d661ccfeb	Tech Services FC TechOps	FCTechOps
03efc439-b0dc-4615-afed-646fd22dfe34	FC-Unix	FC-Unix