The Configuration Manager 2007 Active Directory Security Group Discovery method searches for security groups by polling the closest Active Directory domain controller. The Active Directory domain can be in mixed mode or native mode.

As with other Active Directory discovery methods, this method is configurable by the administrator. When configuring it, you can specify the containers to be polled and the polling schedule.

For more information on configuring this discovery method, see How to Configure Active Directory Security Group Discovery.

This method returns the objects as reflected in Active Directory when the discovery method last ran. Although this information is updated when the next poll takes place, you should not consider this method to be dynamic.

Note
You must have Modify permission on the Site Security object or instance to configure the Active Directory Security Group Discovery method.

See Also