Actually, I just wanted to populate the ISA group with FOAD users which
would come right from the log data (not query the AD group), but you make an
excellent point. Just add the AD group to the ISA group, and directly add
FOAD users to the AD group. How often does ISA "refresh" the group
membership data? I guess I'll find out, huh? ;)
Good idea- thanks. t
----- "I may disapprove of what you say, but I will defend to the death your right to say it."
http://www.ISAserver.org
Ah - so you want to query AD for a particular group and add each of those members into the FOAD ISA group? It's actually simpler to create the AD group, use that in the policy and just manage the group membership from AD. This way, you don't have to manage two separate lists.
Still, it's another interesting idea from an instructional viewpoint; how to use AD data to populate ISA rule elements...
-------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! -------------------------------------------- -----Original Message----- From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] Sent: Tuesday, December 20, 2005 9:32 PM To: [ISAserver.org Discussion List] Subject: [isalist] Scripting users into a User Group
http://www.ISAserver.org
Hey- I've looked at the Ninja's ISAtools.org site, but didn't see what I was looking for... Where can I get an advanced scripting resource for ISA Server 2004? Initially, I just want to be able to add Active Directory users into a particular ISA User Group via a script, but now that I'm getting really heavy into my SQL log analysis stuff, I'd like to be able to fully automate some things, like automatically adding users to my "Denied, Little Beotch!" access rule (via group membership) when they visit sex sites while on the clock.
t
----- "I may disapprove of what you say, but I will defend to the death your right to say it."
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx