Troubleshoot built-in Active Directory groups not displaying in the Umbrella Policy wizard

Available Languages

Download Options

  • PDF     (8.6 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (85.4 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (73.2 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:August 22, 2025
Document ID:224666

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes certain built-in AD groups are not displaying in the Umbrella Policy wizard. After deploying Umbrella Active Directory (AD) integration components, specifically the AD Connector, certain built-in AD groups are not displayed in the Umbrella Policy wizard.

    However, non-built-in AD groups, AD users, and AD computers are still found in the Umbrella Policy wizard as expected.

    Explanation

    The AD Connector purposely does not import built-in AD groups to the Umbrella API. As such, it is expected that you arenot be able to define policies for these groups. 

    However, the "Domain Users" and "Domain Computers" are two built-in groups that are specifically imported to Umbrella to facilitate policy creation on all users or all computers of a particular AD domain.  

    The built-in AD groups not imported to Umbrella are:

    • ADBIAdministrators
    • ADBIAuthors
    • ADBIConsumers
    • Account Operators
    • Administrators
    • Allowed RODC Password Replication Group,
    • BIAdminstrator
    • BIAuthor
    • BIConsumer
    • Backup Operators
    • CERTSVC_DCOM_ACCESS
    • CSAdministrator
    • CSArchivingAdministrator
    • CSHelpDesk
    • CSLocationAdministrator
    • CSResponseGroupAdministrator
    • CSServerAdministrator
    • CSUserAdministrator
    • CSViewOnlyAdministrator
    • CSVoiceAdministrator
    • Cert Publishers
    • Certificate Service DCOM Access
    • Company Administrator
    • Content Engine Servers
    • Cryptographic Operators
    • DBA
    • DHCP Administrators
    • DHCP Users
    • Delegated Setup
    • Denied RODC Password Replication Group
    • Discovery Management
    • Distributed COM Users
    • DnsAdmins
    • DnsUpdateProxy
    • Domain Admins
    • Domain Controllers
    • Domain Guests
    • ESX Admins
    • Enterprise Admins
    • Enterprise Read-only Domain Controllers
    • Event Log Readers
    • Exchange All Hosted Organizations
    • Exchange Domain Servers
    • Exchange Enterprise Servers
    • Exchange Install Domain Servers
    • Exchange Organization Administrators
    • Exchange Public Folder Administrators
    • Exchange Recipient Administrators
    • Exchange Servers
    • Exchange Trusted Subsystem
    • Exchange View-Only Administrators
    • Exchange Windows Permissions
    • Exchange2003Interop
    • ExchangeLegacyInterop
    • FNADMIN
    • FNOP
    • FNUSR
    • Group Policy Admins
    • Group Policy Creator Owners
    • Guests
    • Help Desk
    • Help Desk Administrator
    • HelpDeskAdmins_*
    • HelpServicesGroup
    • Hygiene Management
    • IIS_IUSRS
    • IIS_WPG
    • Incoming Forest Trust Builders
    • Network Configuration Operators
    • ORA_DBA
    • OracleDBCreators
    • OracleDBSecurityAdmins
    • OracleNetAdmins
    • Organization Management
    • Performance Log Users
    • Performance Monitor Users
    • Pre-Windows 2000 Compatible Access
    • Print Operators
    • Public Folder Management
    • RAS and IAS Servers
    • RTCArchivingUniversalServices
    • RTCComponentUniversalServices
    • RTCHSUniversalServices
    • RTCHSUniversalServices
    • RTCProxyUniversalServices
    • RTCProxyUniversalServices
    • RTCSBAUniversalServices
    • RTCUniversalConfigReplicator
    • RTCUniversalGlobalReadOnlyGroup
    • RTCUniversalGlobalWriteGroup
    • RTCUniversalGuestAccessGroup
    • RTCUniversalReadOnlyAdmins
    • RTCUniversalSBATechnicians
    • RTCUniversalServerAdmins
    • RTCUniversalServerReadOnlyGroup
    • RTCUniversalUserAdmins
    • RTCUniversalUserReadOnlyGroup
    • Read-only Domain Controllers
    • Recipient Management
    • Records Management
    • Remote Desktop Users
    • Replicator
    • SMSMSE Admins
    • SMSMSE Viewers
    • SPS_WPG
    • SQLServer2005DTSUser$
    • SQLServer2005MSFTEUser$
    • SQLServer2005MSOLAPUser$
    • SQLServer2005MSSQLServerADHelperUser$
    • SQLServer2005MSSQLUser$
    • SQLServer2005NotificationServicesUser$
    • SQLServer2005ReportServerUser$
    • SQLServer2005ReportingServicesWebServiceUser$
    • SQLServer2005SQLAgentUser$
    • SQLServer2005SQLBrowserUser$
    • SQLServerDTSUser$
    • SQLServerFDHostUser$
    • SQLServerMSASUser$
    • SQLServerMSSQLServerADHelperUser$
    • SQLServerMSSQLUser$
    • SQLServerReportServerUser$
    • SQLServerSQLAgentUser$
    • SQLServerSQLBrowserUser$
    • STS_WPG
    • Schema Admins
    • Server Management
    • Server Operators
    • Sharepoint Admins
    • TS Web Access Admins
    • TS Web Access Computers
    • TelnetClients
    • TenantAdmins_*
    • Terminal Server License Servers
    • UM Management
    • UM Prompt Administrators
    • Users
    • View-Only Organization Management
    • Virtual Machines
    • WINS Users
    • WSS_ADMIN_WPG
    • WSS_RESTRICTED_WPG
    • WSS_Restricted_WPG_V4
    • WSS_WPG
    • WSUS Administrators
    • WSUS Reporters
    • Windows Authorization Access Group
    • XMLP_ADMIN
    • XMLP_ANALYZER_EXCEL
    • XMLP_ANALYZER_ONLINE
    • XMLP_DEVELOPER
    • XMLP_SCHEDULER
    • XMLP_TEMPLATE_DESIGNER
    • ucsaaa
    • ucsadmin
    • ucsnetwork
    • ucsoperation
    • ucssecurity
    • ucsstorage

    Revision History

    Revision Publish Date Comments
    1.0
    22-Aug-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products