Policy set up for groups

Question

Currently i'm trying to set up a group kind of like i have a user policy set up 
 
 this group will show TEST_ by default so any time they type in information it will show TEST_groupname 
 I thought it would be alot easier but when i set it up it only shows validates instead of generate. 
 
 does anyone have any other issues regarding this? or should i contact the service desk?

Stu.Pollock · Answer

Hi Gregory 
 
 Yes, it is possible to create an Administration Policy which would default the name of a group to be "TEST_". To implement this against name (CN) I'd do the following: 
 
 Create a new Administration Policy (or modify an existing Administration Policy) 
 Add a new Policy:
 
 Type: Property Generation and Validation 
 Controlled Property of a Group (group): name (cn) 
 Policy Rule:
 
 'Name' must be populated 
 'Name' must be <value> (generates default value), value list should include:
 
 TEST_ 
 {*}

'Name' must not be: TEST_ 
 'Name' must begin: TEST

If a new Administration Policy link to the appropriate OU/Mangaged Unit 
 Test

The policy rules do the following: 
 
 under A, we're saying the value must be populated, which is true anyway. 
 under B, the policy rule is going to generate the (see populate) the property with a value, our first rule says "TEST_", so it will default to that value 
 under C, I've said the name must not be TEST_, this is to stop people trying to create a group just called TEST_ 
 under D, I've also said the name must begin with TEST_, this is to prevent them from creating any name group. Technically, we could modify the {*} rule to be TEST_{*} to do something similar

This would result in the following 
 
 Hope this helps

Endpoint Privilege Management

Policy set up for groups