Dynamic security groups are now possible in Active Directory. Dynamic distribution groups already exist in MS Exchange Server. So far they cannot be used to assign permissions to AD objects. There is various scenarios that make it necessary to use them like risk management or a fast provisioning of permissions.
Active Directory specialist FirstAttribute has created a solution to establish dynamic security groups based on LDAP filters. FirstWare-DynamicGroup allows you to
- Automatically assign permissions
- Automatically remove permissions (when an employee changes departments)
- Use black and white lists for special cases
- Flat groups
(if there is a user in a group which is in another group which is in another group etc.)
And other features integrated into the solution.
For further information please consult the website www.FirstAttribute.com.