This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using Managed Units outside of Active Roles

Has anyone come up with a way to use Managed Units outside of Active Roles?  I have a customer that would like to setup some Managed Units so that when they are setting permissions on SharePoint sites, the admin does not search the entire AD, but just the MU that contains the appropriate users.

Dynamic Groups also seemed like a possibility....

Anyone have any suggestions?

  • Hello,

    You can't use Managed Units outside of Active Roles. It's possible to sync the Managed Unit permissions to AD but it's not recommended as it can cause performance issues.

  • It depends on your definition of "use".

    For example, if I have a Managed Unit called "Chicago Users", I can reference it from Powershell thus:

    $MyUsers = get-qaduser -proxy -searchroot "CN=Chicgo Users,CN=Managed Units,CN=Configuration"

    If I have been delegated rights to this MU, I will get back the list of users.