Hi! How can I create a Dynamic Computer Group based on AD Security Group memberships? Thanks in advance! /Michael

Hi Michael, I am afraid to say that by default we cannot create computer group based on its security group membership information. However, we can create a dynamic Windows computer group with Dynamic Inclusion Rules, which was previously provided in the formula, such as Principle Name, DNS Name, DNS Domain Name, Organizational Unit, and so on. Here is an article about how to populate a group in SCOM 2007 based on a OU in Active Directory. It is also applicable to SCE 2007. And I think it may be close to your requirements. Groups Based on Organizational Unit (OU) http://contoso.se/blog/?p=194 Just for your reference, I think the following thread may be helpful to you. Error - Managed Computer Group - Dynamic Members Group http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2069873&SiteID=17 Thanks. Sincerely, Yog Li Microsoft Online Community Support

Hi! Thanks for your reply. I am aware how to make Computer Groups based on OU-memberships, but I need to be able to deploy software to computers in specific Security Groups as well. Will this option be available later? /Michael

Hi Michael, I will report your request. However, personally I don't think it will be available recently. At this time, please use a computer group with explicit members, or put the necessary computer objects in a specific OU and then use the previous method to dynamic group them by using the OU information. Thanks. Sincerely, Yog Li Microsoft Online Community Support

i've got to say this is a HUGE disappointment. SCOM was supposed to be ENTERPRISE level. These 'workarounds' only seem to work in small environments. Admins will not have SCOM access directly because they could make a mistake and target costly rules to the entire environment. (See KB938999)Having a dedicated SCOM admin keep the group memberships up seems like a waste of time.Is there a way to programmatically add explicit memberships to groups in SCOM?

Hi Joseph, I think SCOM (System Center Operations Manager) does support Role Based Security as you wish. However, this forum is for SCE (System Center Essentials) related issues. And SCE doesnt support Role Based Security. For questions about System Center Operations Manager 2007, please use the Microsoft public newsgroups for SCOM, which would be the most relevant newsgroup for your question. Discussions in Operations Manager General Discussionhttp://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.opsmgr.general Thanks. Sincerely,Yog LiMicrosoft Online Community Support

The http://contoso.se/blog/?p=194 blog works great if you want to query Domain Controllers. I tried a variety of other OU's in a number of different formats and none seemed to work. Any thoughts on why? According to that article and others, I should simply be able to do a wildcard search for any computer in that OU, but it doesn't seem to work. I have tried a vareity of combinations and none seem to work beyond the Domain Controllers example.