MustMaintainADGroupMembership

Gets or sets the flag that indicates whether Active Directory group membership must be maintained.

Syntax

bool MustMaintainADGroupMembership {get; set;}

Property value

Returns true if the Active Directory group membership must be maintained; otherwise, it returns false.

Discussion

By default, setting the primary Active Directory group in a user’s UNIX profile does not affect the user’s actual Active Directory group membership.

If you want to enforce Active Directory group membership for new users when you add them to the zone, set this property to true. Setting this property to true displays the Associate Active Directory group membership option in the Zone Properties dialog box.

Example

The following code sample illustrates using MustMaintainADGroupMembership in a script:

...
'Specify the zone you want to work with
set zone = GetZone("fireball.net/Field/Zones/macs”)
'Check whether Active Directory group membership is enforced
if zone.MustMaintainADGroupMembership then
   wScript.Echo “Active Directory group membership maintained”
else
   wScript.Echo “No Active Directory group membership needed”
end if
...