Group Managers to add members from other domains

Question

Hi

Using Adaxes 3.13.18001.0 on Server 2019

I'm adding a self service option for our domain users to be able to add people to groups they are set as the owner of but I'm runinng into an issue with our domian complexity!

We currently have (for complicated reasons) a domain with 10 child domains!

I can log into a web interface as an end user and select the group I want to manage from any domain, but when I go to add new users, I can only select a user from the same domain as the group is in. It doesn't matter if this is a domain local or universal group, the scope of the User search is one domain and greyed out.

Is there a way to change this so that the Add will by default search everywhere? I've checked the config page a number of times and can't see anything.

Thanks

Answer 1

Hello,

Could you, please, check whether users from other domains are generally available in the Web Interface. For example, you can check it via the Browse option or by generating the All users report (by default located in container Reports/All Reports/Users) with Everywhere scope. If the users are not available, make sure that the Web Interface is not limited to display only specific object (e.g. located in a single domain). For details, have a look at the following tutorial: https://www.adaxes.com/tutorials_WebInterfaceCustomization_PreventUsersFromViewingTheADStructure.htm. Should the issue persist, please, post here or send us (support[at]adaxes.com) screenshots for all the steps you take to reproduce the issue. Any additional information will be much appreciated.

Comments

Thanks for the reply.

Following that I can confirm that the ability to change the domain being searched is available once I enabled "Show the Browse dialog in" and "Operations on AD objects" in the Navigation section.

This is still defaulting to the domain the group is located in which is fine but would there be a way to set this to default to everywhere?

Matt

---

Hello Matt,

Unfortunately, there is no possibility to change the default search scope for adding members to groups. When you click Add in the Members section, the search always defaults to the domain of the group. You can then select Everywhere in the drop-down.