How to create AD security group, filtering by a custom property

**bidepan** · 03-06-2010

Hi guys,

I'm trying to create AD security groups based on a custom property, say EmployeeType, that property has two values: Employee/Contractor.

I want to create one group for Employee, one group for Contractor based on that custom property value, so that all existing users can be put in those two buckets and new added users can be automatically put in the corresponding bucket when accounts created.

How can I achieve that?

Thanks,
J

**JareD** · 03-06-2010

As far as I know Query based distribution groups only exist for Exchange and not for security groups which you are trying to do. Hence the only way I can suggest you is by using a script to populate existing users at the start into your new groups and provisioning logic (or scripts) to add new users. Just try these out and see if it helps.

**jean** · 03-06-2010

I think you can do it simply using a script which will manage the groups depending on particular criteria. You can get those scripts and more details about the same here:

Script Center: http://technet.microsoft.com/en-us/s...r/default.aspx
Script Resources for IT Professionals: http://gallery.technet.microsoft.com...site/search/?f[0].Type=RootCategory&f[0].Value=activedirectory&f[0].Text=Active%20Directory