Filtering by group

Hello:

I would like to filter apps by group, rather than by user. I have created global security groups in AD and have tried to filter apps based on that with no luck in 2x running my terminal server. I also ran a test by putting a demo version of 2x on another computer in the AD domain and I WAS able to filter by group on that computer. Can anyone give me any suggestions on what to look for so that I can filter by groups instead of users?

Thanks!

 

When filtering by group only the users that are in that particular group will have access to that application. Please note that if the group contains an other group, those users will not be allowed, only users in the specified group will be allowed.

Eg.

Code:

Group A
  |
  --- User 1
  |
  ---- Group B
         |
         ----- User 2

If an application us filtered by Group A, then User 1 will have access but User 2 will NOT have access.

Nixu

 

I understand the concept, however it's not working. When I publish an application and then put "Group A" in as the filter, none of the users in that group can see the application.

Currently, I am adding every user that needs the published application individually to overcome this problem, since I have yet to find a fix for this. Any help is greatly appreciated.

 

I also have this problem. I have a group in another AD domain that does this. Yes my trusts and so on and so forth are setup correctly as I only have this problem with the 2x software. If I filter by that group nobody gets the applications however if I put the users in from that domain individually then they have no problems getting the applications. I've been racking my brain over this for a month and cant figure out why the group wont work. It's almost like 2x isn't seeing the group out of AD fast enough to check its user membership before the user gets logged into the client or something weird to that affect. I'm hoping there is a solution other then manually adding in each individual user. Thanks Nixu for any help you can provide!

 

Could you please confirm that the groups in the user column of the publishing->filtering->user page are in the following Format:
WinNT://Domain/Group1

Are you using a Win2000 domain or Win2003 domain ?

Can you also please state what type and scope of group you are using for your users [Group Scope :- domain local/global/universal] [Type :- security/distribution]?

Nixu

 

The group is in the following format:
WinNT://Domain/Group1

This is a Windows 2003 Domain.

This is a Global Group and the Type is Security.

Thanks Nixu!

 

Same here.

 

Hi Guys...

I have tested your scenario and it is working as expected..

What i suggest is to send a support request from the 2X Console, so as to escalate your issue and have it solved.

Please do describe your scenario in as much detail as possible and do refer to this post.

Nixu

 

Is this really correct ?

I have tried to mimic this setup, but on my server, the users in group B have full access, even if Group A is empty or not.

I am using version 6.

aha, I found the error. Working as shown above.

 

Is this problem solved yet?

I also have this problem. I have a group in another AD domain that does not work.

Is this problem solved yet?

Is there a solution i can try?

Thanks.