Customize the Group creation interface via WEB

Hi graziano santucci 

The easiest way to do this is via an Administration Policy, where you define a PGV (Property Generation and Validation) rule, which says the groupType attribute of a group object must be specified, where you define the groupType value you want as 8 (where 8 means Universal Distribution group).

You would then just link that Administration Policy to the OU's or Containers where only Universal Distribution groups should be created

Hi graziano santucci 

The easiest way to do this is via an Administration Policy, where you define a PGV (Property Generation and Validation) rule, which says the groupType attribute of a group object must be specified, where you define the groupType value you want as 8 (where 8 means Universal Distribution group).

You would then just link that Administration Policy to the OU's or Containers where only Universal Distribution groups should be created

Hello ,

thanks so much for the information , your information worked.

Where did you get the information that the value 8 corresponds to the universal distribution group?

Is there a reference document for other configurations?

Thank you

Hi graziano santucci 

Glad you got it working :) There are scripting options, but where you can get it to work OOTB is always great.

Generally if I'm trying to work out which attribute I want to control, and the possible values I want to define, I will either look at different examples of groups and look for commonalities (using Advanced Properties), or if its AD defined values like groupType, or UserAccountControl etc, I'll refer to Microsoft documentation and/or articles.

[MS-ADTS]: Group Type Flags | Microsoft Learn

How Can I Tell Whether a Group is a Security Group or a Distribution Group? - Scripting Blog (microsoft.com)