You could look at Identify Integration Feature Pack (IIFP). It's a free download. Would take some configuration & setup time, and probably some programming to make it work. But you can apply some business logic to putting people into AD groups.
Short of that, write a vbscript or powershell script that runs as a scheduled task to put users into the group(s) you need. Scott From: James Rankin [mailto:[email protected]] Sent: Thursday, February 05, 2009 9:13 AM To: NT System Admin Issues Subject: Re: Force group membership I like to be able to view people's settings by looking at their group memberships - that's why we have groups for drive mappings, printers, application delivery, etc. Plus applying it to Domain Users would probably impact those who have less restrictive memberships in WebSense - although I must confess I am unsure whether WebSense applies "most restrictive" or "least restrictive" to its calculations 2009/2/5 Sherry Abercrombie <[email protected]> Why not just have Websense use something like Domain User? On Thu, Feb 5, 2009 at 7:58 AM, James Rankin <[email protected]> wrote: Is there any way I can force all user accounts to be a member of a certain AD group? I have several levels of WebSense groups and I want to make sure that all user accounts always belong to at least one of them. Can this be done through Group Policy? -- Sherry Abercrombie "Any sufficiently advanced technology is indistinguishable from magic." Arthur C. Clarke ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
