locked
AD Groups show domains RRS feed

  • Question

  • Hi

    Not to be padantic but when I add AD groups to SharePoint I sometimes get a difference in the listing i.e.

    1. SPT CSvsDepositAdvisors (SMGROUP\spt csvsdepositadvisors)
    2. SMGROUP\spt csvsmonitoring

    The 1st entry is very long and prefer the 2nd entry, but why the difference, cannot see any difference in AD

    Thanks

    Friday, May 25, 2012 7:34 AM

Answers

  • This is proabably due to the fact that the DisplayName attribute is filled in on the Active Directory object of the group. For a normal AD security group it is not filled in by default (and even not visible in the Active Directory Users and Computers MMC) so SharePoint displays the name of the group. It is visible for mail enabled groups and if specified, SharePoint shows this value. Anyway you can check it using ADSIEDIT.msc or in the case of Windows 2008 Active Directory using the Attribute Editor pane in Active Directory Users and Computers MMC. In SHarePoint you can verify the displayname by viewing the group properties.

    Dirk Van den Berghe

    Friday, May 25, 2012 7:43 AM

All replies

  • This is proabably due to the fact that the DisplayName attribute is filled in on the Active Directory object of the group. For a normal AD security group it is not filled in by default (and even not visible in the Active Directory Users and Computers MMC) so SharePoint displays the name of the group. It is visible for mail enabled groups and if specified, SharePoint shows this value. Anyway you can check it using ADSIEDIT.msc or in the case of Windows 2008 Active Directory using the Attribute Editor pane in Active Directory Users and Computers MMC. In SHarePoint you can verify the displayname by viewing the group properties.

    Dirk Van den Berghe

    Friday, May 25, 2012 7:43 AM
  • Hi

    I've removed the text in Display properties from AD waited a day and then added the group to sharepoint. but still I get :

    SPT CSvsDepositAdvisors (SMGROUP\spt csvsdepositadvisors)

    Though when the group has no email I then get the shorter version :

    (SMGROUP\spt csvsdepositadvisors)

    Removing the Display name makes no difference.

    I checked The group (with AD Email) in Sharepoint :

    Account SMGROUP\s_collsupervisor 
    Name S_CollSupervisor

    and again (without AD Email) in Sharepoint

    Account SMGROUP\s_collsupervisor 
    Name SMGROUP\s_collsupervisor

    It looks like when the Account differs from the Name Sharepoint then uses both to display.

    everytime I remove display name from AD group, it somehow gets automatically re-entered.

    So to cut a long story short is it possible for SharePoint to show either Account or Name but not both ?

    Thanks

    Sunday, May 27, 2012 9:59 AM