Chaps.
We have Admins who have access to the MMC console and as such have the ability to change Dynamic group membership. Is there away to stop say AdminGroup1234 from being able to edit specific Dynamic groups?
Thanks in advance
Chaps.
We have Admins who have access to the MMC console and as such have the ability to change Dynamic group membership. Is there away to stop say AdminGroup1234 from being able to edit specific Dynamic groups?
Thanks in advance
Ah i see. Ok, think i am getting my head around this now.
First, yes you could use a managed unit to take the workflow against, but the rules on that Managed Unit would need to be restricted to prevent the admin changing the rules to get around the workflow from stopping them doing something they shouldn't/
And yes, the workflow could be written in such a way to prevent them from changing a DG's rules, by removing the property being updated (which stored the rules) from the request. But if they were either in the same change or another change to set the VA that would remain (unless you us a block activity, at whcih point they'd need to re-do the change without the manual change to the DG property).
But you'd need a workflow to execute on setting that VA to do the update to the DG property, which should be triggered by the Admin Service, rather than the admin user.
I have the DG being updated via a VA and thats working fine. So if i can get the MU working to stop direct changes then im golden.
Ok, so does this look right so far? I am little unsure of the filtering if the person requesting the change is a member of GroupABC
Close, the initiator condition should be the group with the users in you want to trigger the workflow, and the managed unit (not all of them) where your DG's you're wanted to protect exist.
The condition you have at the moment, would by triggered by any users, for any groups within managed units, where the DG condition list is updated...
Boom and we are there, GroupA you are stopped in your tracks and GroupB you can update as normal. Fantastic. This is looking good chaps.
Cool, glad you got it working!
Stu.Pollock JohnnyQuest Thanks for your help on this one. As always I very much appreciate your help.