Synchronize Active Directory Groups and Subgroups (Nested Groups)

Here's something I ran though the other day on Active Directory Groups. Let's say you have the following groups in Active Directory:

1. PW Users = {Team A, Team B, Team C}
2. Team A = {User 1, User 2, User 3}
3. Team B = {User 4, User 5, User 6}
4. Team C = {User 7, User 8, User 9}

By default, if you synchronize the AD group "PW Users" using the User Synchronization Service, you will get the following group in ProjectWise:

1. PW Users = {User 1, User 2, User 3,User 4, User 5, User 6,User 7, User 8, User 9}

Add the following DWORD Value to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PWAutSrv:
"CreateEnumeratedSubGroups" = 1

Now when you synchronize the AD group "PW Users" using the User Synchronization Service, you will get the following ProjectWise groups:

1. PW Users = {User 1, User 2, User 3,User 4, User 5, User 6,User 7, User 8, User 9}
2. Team A = {User 1, User 2, User 3}
3. Team B = {User 4, User 5, User 6}
4. Team C = {User 7, User 8, User 9}

In summary, if HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PWAutSrv "CreateEnumeratedSubGroups" = 0 or is not defined, then no sub groups will be synchronized. "CreateEnumeratedSubGroups" = 1, then sub groups will be synchronized.

JP