Updating group attributes

Since group owners are not supported natively by Windows servers for NT systems, additional configuration will be required for some of the group updates for operations such as to delete a group, updating group attributes, or for updating group memberships.

The access controls for pre-defined requests such as _GROUP_DELETE_ or _GROUP_UPDATE_ATTRS_ should be reviewed in this case to allow for access to perform such operations.

The comment group attribute is mapped to the GROUP_NAME resource attribute by default. The group attribute may be overridden to allow for the group description to be updated by setting the value for ’Action when updating group’ from ’None’ to ’Set to specified value’.

The name group attribute may also be overridden to rename a group when updating the group attributes by setting the value for ’Action when updating group’ from ’None’ to ’Set to specified value’ as well as by setting the value for ’Map group attribute to resource attribute’ to GROUP_ID. The GROUP_ID resource attribute would also need to be added to a resource attribute group such as GROUP_INFO_UPDATE.

Adding local NT groups as group members to existing local NT groups is currently not supported natively for Windows servers for NT systems. Adding or removing group memberships for Windows server NT groups may only be performed to add or remove domain groups to or from local NT groups for Windows servers using the (agtnt) connector.

When creating a new group for Windows server, the OU group attribute is not used. Any value may be specified from the Groups app for this case for NT system groups.