The Configuration Manager 2007 Active Directory System Group Discovery method searches for system group resources by polling the closest Active Directory domain controller. The Active Directory domain can be in mixed mode or native mode.

As with other Active Directory discovery methods, this method is configurable by the administrator. When configuring it, you can specify the containers to be polled and the polling schedule.

For more information on configuring this discovery method, see How to Configure Active Directory System Group Discovery.

Active Directory System Group Discovery provides additional information about computers discovered by Active Directory System Discovery. Active Directory System Group Discovery returns the following group information about computer accounts:

• Organizational unit
  
  
• Global groups
  
  
• Universal groups
  
  
• Nested groups
  
  
• Nonsecurity groups
  
  

This method returns the objects as reflected in Active Directory when the discovery method last ran. Although this information is updated when the next poll takes place, you should not consider this method to be dynamic.

Note
You must have Modify permission on the Site Security object or instance to configure the Active Directory System Group Discovery method.

See Also