Microsoft Corporation
Validation of user subgroups against directory attributes for dynamic group rules

Abstract:

Selective validation of subgroups of users against group rule parameters is performed to validate group rule parameters for a dynamic group rule. An administrator defines the group rule parameters and selects individual user accounts which are either expected to be included within and/or excluded from a full membership list for the dynamic group rule. For example, the administrator may select first user accounts that are expected to be included within the full membership list and/or second user accounts that are expected to be excluded from the full membership list. Then, a subgroup validation report is generated to inform the administrator whether or not individual user accounts from the subgroup of user accounts satisfy the group rule parameters and, therefore, will be included within the full membership list of the dynamic group rule. The subgroup validation report reveals the efficacy of the group rule parameters.