Hi Tod, I do not understand your question. By adding a user to a group in AD and the user account is deleted on the user leaving all his group associations are removed as well. In other words you do not need to go through all the groups and remove the user from each individually.
Best Regards; Bashir Jahed Network Manager South African National Biodiversity Institute Tel | +2721 799 8844 Email | [EMAIL PROTECTED] Web | www.sanbi.org >>> "Todd, David" <[EMAIL PROTECTED]> 2008/07/23 05:12 PM >>> Here's the situation: We have LDAP, in the form of Active Directory. I want to be able to tag users with various OU's, so that when I search for all the users that match an OU, I get, in essence, a group. "Aha!", you might say, "Why not just make groups in AD?" Because when a user leaves the company, All I have to do is remove those OU tags from his record, instead of having to modify some number of group files. So, my question is how do I get plone to check to see if a user has a specific OU attached to their record as a method for checking group membership? _______________________________________________ Setup mailing list [email protected] http://lists.plone.org/mailman/listinfo/setup _______________________________________________ Setup mailing list [email protected] http://lists.plone.org/mailman/listinfo/setup
