group type

(is | is not) any of the following keywords: security or distribution in a comma-separated list

Purpose

Warns when the specified AD group's type is/is not the specified type or types.

Examples

# Warns when a group is not a security group.
group type is security

# Warns when non-distribution groups are seen (equivalent to above example
# because there are only two types of groups).
group type is not distribution

# Groups may be either type.
group type is security, distribution

Example configuration

# Warn when we see non-distribution groups.
[group:"Field Consultants" "CN=Field Services OU Admins,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "CN=Tech Services FC Tech\*,OU=FC Groups,OU=Field Consulting,OU=Delegated,OU=TechServices,OU=Urbana,DC=ad,DC=uillinois,DC=edu" "03efc439-b0dc-4615-afed-646fd22dfe34"]
group type is distribution

Example output

Line 6: Expected to see AD groups of type distribution, but there are 4 groups which are not the expected group type:

ObjectGUID	sAMAccountName	Name	GroupCategory
2515e8a0-1f1c-41f4-9139-eebc07ab2dc1	Field Consultants	Field Consultants	Security
d962fe33-6501-45fd-a686-962f49481e7b	Field Services OU Admins	Field Services OU Admins	Security
f79cefc3-ac3c-4993-aab7-759d661ccfeb	FCTechOps	Tech Services FC TechOps	Security
03efc439-b0dc-4615-afed-646fd22dfe34	FC-Unix	FC-Unix	Security