HPSIM INtegration with W2K3 AD

[ross stewart_2]

Hi I want to use AD groups that are nested to permit access to HPSIM. Is this possible, and what are the rules. Is there a good document available. Thanks

[OlivierV]

Hello.
Yes, it is possible to use AD groups to grant user access to the CMS. I explain you how I do that.
The CMS is member of the AD of course.
The CMS is SIM 5.0
I have created a local group with the 'access this computer from the network' right (in the local policy).
In this group, I have added the AD groups that I want to grant the members to log on SIM.
In SIM now, I have created the groups with the exact same name of the AD group (32 characters maximum for the name).
When a user logs on and is a member of one of these groups, the user will be created with the same rights as the group, but will be listed in italics charaters to show that it was created from a group.
Regards.

[ross stewart_2]

Thanks. Do you know if this supports nested groups in AD. We have a delegation model where each country will have eg an Hp users group and those country groups will be in the top level group.

[OlivierV]

Not tested. If SIM 'asks' the AD if UserA is member of group1 for example, AD should reply 'yes' even if it is not directly in the group in question, and SIM lets the user login.