browse
Overview
After deploying Umbrella Active Directory integration components, specifically the AD Connector, you find that certain built-in AD groups are not found in the Umbrella policy wizard.
However, non-built-in AD groups, AD users, and AD computers are still found in the Umbrella policy wizard as expected.
Explanation
The AD Connector purposely does not import built-in AD groups to the Umbrella API. As such, it is expected that you will not be able to define policies on these groups.
However, the "Domain Users" and "Domain Computers" are two built-in groups that are specifically imported to Umbrella to facilitate policy creation on all users or all computers of a particular AD domain.
The list of built-in AD groups not imported to Umbrella are as follows:
ADBIAdministrators
ADBIAuthors
ADBIConsumers
Account Operators
Administrators
Allowed RODC Password Replication Group,
BIAdminstrator
BIAuthor
BIConsumer
Backup Operators
CERTSVC_DCOM_ACCESS
CSAdministrator
CSArchivingAdministrator
CSHelpDesk
CSLocationAdministrator
CSResponseGroupAdministrator
CSServerAdministrator
CSUserAdministrator
CSViewOnlyAdministrator
CSVoiceAdministrator
Cert Publishers
Certificate Service DCOM Access
Company Administrator
Content Engine Servers
Cryptographic Operators
DBA
DHCP Administrators
DHCP Users
Delegated Setup
Denied RODC Password Replication Group
Discovery Management
Distributed COM Users
DnsAdmins
DnsUpdateProxy
Domain Admins
Domain Controllers
Domain Guests
ESX Admins
Enterprise Admins
Enterprise Read-only Domain Controllers
Event Log Readers
Exchange All Hosted Organizations
Exchange Domain Servers
Exchange Enterprise Servers
Exchange Install Domain Servers
Exchange Organization Administrators
Exchange Public Folder Administrators
Exchange Recipient Administrators
Exchange Servers
Exchange Trusted Subsystem
Exchange View-Only Administrators
Exchange Windows Permissions
Exchange2003Interop
ExchangeLegacyInterop
FNADMIN
FNOP
FNUSR
Group Policy Admins
Group Policy Creator Owners
Guests
Help Desk
Help Desk Administrator
HelpDeskAdmins_*
HelpServicesGroup
Hygiene Management
IIS_IUSRS
IIS_WPG
Incoming Forest Trust Builders
Network Configuration Operators
ORA_DBA
OracleDBCreators
OracleDBSecurityAdmins
OracleNetAdmins
Organization Management
Performance Log Users
Performance Monitor Users
Pre-Windows 2000 Compatible Access
Print Operators
Public Folder Management
RAS and IAS Servers
RTCArchivingUniversalServices
RTCComponentUniversalServices
RTCHSUniversalServices
RTCHSUniversalServices
RTCProxyUniversalServices
RTCProxyUniversalServices
RTCSBAUniversalServices
RTCUniversalConfigReplicator
RTCUniversalGlobalReadOnlyGroup
RTCUniversalGlobalWriteGroup
RTCUniversalGuestAccessGroup
RTCUniversalReadOnlyAdmins
RTCUniversalSBATechnicians
RTCUniversalServerAdmins
RTCUniversalServerReadOnlyGroup
RTCUniversalUserAdmins
RTCUniversalUserReadOnlyGroup
Read-only Domain Controllers
Recipient Management
Records Management
Remote Desktop Users
Replicator
SMSMSE Admins
SMSMSE Viewers
SPS_WPG
SQLServer2005DTSUser$
SQLServer2005MSFTEUser$
SQLServer2005MSOLAPUser$
SQLServer2005MSSQLServerADHelperUser$
SQLServer2005MSSQLUser$
SQLServer2005NotificationServicesUser$
SQLServer2005ReportServerUser$
SQLServer2005ReportingServicesWebServiceUser$
SQLServer2005SQLAgentUser$
SQLServer2005SQLBrowserUser$
SQLServerDTSUser$
SQLServerFDHostUser$
SQLServerMSASUser$
SQLServerMSSQLServerADHelperUser$
SQLServerMSSQLUser$
SQLServerReportServerUser$
SQLServerSQLAgentUser$
SQLServerSQLBrowserUser$
STS_WPG
Schema Admins
Server Management
Server Operators
Sharepoint Admins
TS Web Access Admins
TS Web Access Computers
TelnetClients
TenantAdmins_*
Terminal Server License Servers
UM Management
UM Prompt Administrators
Users
View-Only Organization Management
Virtual Machines
WINS Users
WSS_ADMIN_WPG
WSS_RESTRICTED_WPG
WSS_Restricted_WPG_V4
WSS_WPG
WSUS Administrators
WSUS Reporters
Windows Authorization Access Group
XMLP_ADMIN
XMLP_ANALYZER_EXCEL
XMLP_ANALYZER_ONLINE
XMLP_DEVELOPER
XMLP_SCHEDULER
XMLP_TEMPLATE_DESIGNER
ucsaaa
ucsadmin
ucsnetwork
ucsoperation
ucssecurity
ucsstorage