group sAMAccountName

(is | is not) literal name
(like | not like) wildcard expression
(matches | not matches) regular expression

Purpose

Warns when the specified AD group's sAMAccountName does not match the specification.

Notes

This requirement may be repeated in the same section.

Why this requirement might be used

AD object naming standards in your unit/college/project were likely established because such standards clearly identify what AD objects are to humans. This requirement can warn IT professionals about non-compliance with those naming standards.
Sometimes the sAMAccountName of a directory service account matters — documentation on role-based accounts in Microsoft Teams includes “User logon name (pre-Windows 2000) is also important. It MUST match the CN and User Logon Name. This will become the account's SAMAccountName.”

Example configuration

# Warn if the group name is not 'MyUnit All Users'.
[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group sAMAccountName is MyUnit All Users

Example output

Line 8: 4 AD groups with sAMAccountNames that are not “MyUnit All Users”:

Group object GUID	Group name	Group sAMAccountName
2515e8a0-1f1c-41f4-9139-eebc07ab2dc1	Field Consultants	Field Consultants
d962fe33-6501-45fd-a686-962f49481e7b	Field Services OU Admins	Field Services OU Admins
f79cefc3-ac3c-4993-aab7-759d661ccfeb	Tech Services FC TechOps	FCTechOps
03efc439-b0dc-4615-afed-646fd22dfe34	FC-Unix	FC-Unix

Example configuration

[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group sAMAccountName not matches FC

Example output

Line 8: 2 AD groups with sAMAccountnames that match /FC/:

Group object GUID	Group name	Group sAMAccountName
f79cefc3-ac3c-4993-aab7-759d661ccfeb	Tech Services FC TechOps	FCTechOps
03efc439-b0dc-4615-afed-646fd22dfe34	FC-Unix	FC-Unix