I read this…
There are two ways to create groups in Active Directory -
1.) domain…right click…new group
2.) domain…users..right click…new group.
SharePoint cannot correctly use groups where one of the CNs is “users” as is the case in the latter scenario above.
The right way to build groups in order to have SharePoint “like them” is by creating groups from the domain level.
http://drewmace.blogspot.com/2008/02/sharepoint-and-active-directory-groups.html
CN might stand for ‘common name.’ I will have to ask one of my little networking buddies. I’m pretty vague on this whole “AD” thing, as they say. I read the Active Directory wikipedia entry and now I feel slightly smarter. In the most non-technical way possible, here is my interpretation of what it all means:
Active Directory is what the network admins use to organize all their users, services (ex: email) and resources (printers, scanners, web cams, etc). It’s a windows thing. It’s not really a program, it’s a framework. (Like how having folders isn’t a program, it’s just part of the operating system. )
In AD, you can set up groups of users, and SharePoint can use those existing groups for assigning permissions.
More info on SharePoint groups, common problems, trouble shooting and best practices:
Tags: Active Directory, groups, permissions, SharePoint, user group
