You can specify groups by name or you can list the group names in a file using any of the following formats:
- SAM account name: sAMAccountName@domain
- User Principal Name: name@domain
- NTLM: DOMAIN/sAMAccountName
- Full DN: CN=commonName,...,DC=domain_component,DC=domain_component
- Canonical Name: domain/container/cn
The adclient process writes any group name that is not recognized to the agent log file.