Filters created during Active Directory import from OU (Organizational Unit) are displayed with distinguished name instead of canonical name
search cancel

Filters created during Active Directory import from OU (Organizational Unit) are displayed with distinguished name instead of canonical name

book

Article ID: 161052

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

Since SMP 7.5, filters created during Active Directory import are shown in the UI with distinguished name (instead of canonical name in SMP 7.1).
As a result, targeting resources by filters is not convenient and tasks based on canonical name may fail.

No error in Altiris log viewer.

Cause

This behavior is associated to code changes implemented in the ITMS 7.5 release.

Resolution

Changes were implemented in the ITMS 7.6 release.

Starting with SMP 7.6 and later, you can use the new settings called "ADUseCanonicalNameForFilters", "ADUseCanonicalNameForSecurityGroups" and "ADUseCanonicalNameForDistributionGroups" in the coreSettings.config (under C:\ProgramData\Symantec\SMP\Settings):

<-- if set true, the AD import will create filters with canonical names -->
<customSetting key="ADUseCanonicalNameForFilters" type="local" value="0" />

When set to 0 (default value) When set to 1

<!--This setting controls how windows security groups are shown in the selection dialog.
 If enabled the search results will display each groups reverse canonical name.
This is useful when dealing with Windows 2003 Native AD domains as security groups with duplicate names are allowed.-->

<customSetting key="ADUseCanonicalNameForSecurityGroups" type="local" value="true" />

 

<!--This setting controls how windows distribution groups are shown in the selection dialog.
If enabled the search results will display each groups reverse canonical name.
This is useful when dealing with Windows 2003 Native AD domains as distribution groups with duplicate names are allowed.-->

<customSetting key="ADUseCanonicalNameForDistributionGroups" type="local" value="true" />