Contents

Introduction

Explanation

Introduction

This document describes certain built-in AD groups are not displaying in the Umbrella Policy wizard. After deploying Umbrella Active Directory (AD) integration components, specifically the AD Connector, certain built-in AD groups are not displayed in the Umbrella Policy wizard.

However, non-built-in AD groups, AD users, and AD computers are still found in the Umbrella Policy wizard as expected.

Explanation

The AD Connector purposely does not import built-in AD groups to the Umbrella API. As such, it is expected that you arenot be able to define policies for these groups.

However, the "Domain Users" and "Domain Computers" are two built-in groups that are specifically imported to Umbrella to facilitate policy creation on all users or all computers of a particular AD domain.

The built-in AD groups not imported to Umbrella are:

- ADBIAdministrators

- ADBIAuthors

- ADBIConsumers

- Account Operators

- Administrators

- Allowed RODC Password Replication Group,

- BIAdminstrator

- BIAuthor

- BIConsumer

- Backup Operators

- CERTSVC_DCOM_ACCESS

- CSAdministrator

- CSArchivingAdministrator

- CSHelpDesk

- CSLocationAdministrator

- CSResponseGroupAdministrator

- CSServerAdministrator

- CSUserAdministrator

- CSViewOnlyAdministrator

- CSVoiceAdministrator

- Cert Publishers

- Certificate Service DCOM Access

- Company Administrator

- Content Engine Servers

- Cryptographic Operators

- DBA

- DHCP Administrators

- DHCP Users

- Delegated Setup

- Denied RODC Password Replication Group

- Discovery Management

- Distributed COM Users

- DnsAdmins

- DnsUpdateProxy

- Domain Admins

- Domain Controllers

- Domain Guests

- ESX Admins

- Enterprise Admins

- Enterprise Read-only Domain Controllers

- Event Log Readers

- Exchange All Hosted Organizations

- Exchange Domain Servers

- Exchange Enterprise Servers

- Exchange Install Domain Servers

- Exchange Organization Administrators

- Exchange Public Folder Administrators

- Exchange Recipient Administrators

- Exchange Servers

- Exchange Trusted Subsystem

- Exchange View-Only Administrators

- Exchange Windows Permissions

- Exchange2003Interop

- ExchangeLegacyInterop

- FNADMIN

- FNOP

- FNUSR

- Group Policy Admins

- Group Policy Creator Owners

- Guests

- Help Desk

- Help Desk Administrator

- HelpDeskAdmins_*

- HelpServicesGroup

- Hygiene Management

- IIS_IUSRS

- IIS_WPG

- Incoming Forest Trust Builders

- Network Configuration Operators

- ORA_DBA

- OracleDBCreators

- OracleDBSecurityAdmins

- OracleNetAdmins

- Organization Management

- Performance Log Users

- Performance Monitor Users

- Pre-Windows 2000 Compatible Access

- Print Operators

- Public Folder Management

- RAS and IAS Servers

- RTCArchivingUniversalServices

- RTCComponentUniversalServices

- RTCHSUniversalServices

- RTCHSUniversalServices

- RTCProxyUniversalServices

- RTCProxyUniversalServices

- RTCSBAUniversalServices

- RTCUniversalConfigReplicator

- RTCUniversalGlobalReadOnlyGroup

- RTCUniversalGlobalWriteGroup

- RTCUniversalGuestAccessGroup

- RTCUniversalReadOnlyAdmins

- RTCUniversalSBATechnicians

- RTCUniversalServerAdmins

- RTCUniversalServerReadOnlyGroup

- RTCUniversalUserAdmins

- RTCUniversalUserReadOnlyGroup

- Read-only Domain Controllers

- Recipient Management

- Records Management

- Remote Desktop Users

- Replicator

- SMSMSE Admins

- SMSMSE Viewers

- SPS_WPG

- SQLServer2005DTSUser$

- SQLServer2005MSFTEUser$

- SQLServer2005MSOLAPUser$

- SQLServer2005MSSQLServerADHelperUser$

- SQLServer2005MSSQLUser$

- SQLServer2005NotificationServicesUser$

- SQLServer2005ReportServerUser$

- SQLServer2005ReportingServicesWebServiceUser$

- SQLServer2005SQLAgentUser$

- SQLServer2005SQLBrowserUser$

- SQLServerDTSUser$

- SQLServerFDHostUser$

- SQLServerMSASUser$

- SQLServerMSSQLServerADHelperUser$

- SQLServerMSSQLUser$

- SQLServerReportServerUser$

- SQLServerSQLAgentUser$

- SQLServerSQLBrowserUser$

- STS_WPG

- Schema Admins

- Server Management

- Server Operators

- Sharepoint Admins

- TS Web Access Admins

- TS Web Access Computers

- TelnetClients

- TenantAdmins_*

- Terminal Server License Servers

- UM Management

- UM Prompt Administrators

- Users

- View-Only Organization Management

- Virtual Machines

- WINS Users

- WSS_ADMIN_WPG

- WSS_RESTRICTED_WPG

- WSS_Restricted_WPG_V4

- WSS_WPG

- WSUS Administrators

- WSUS Reporters

- Windows Authorization Access Group

- XMLP_ADMIN

- XMLP_ANALYZER_EXCEL

- XMLP_ANALYZER_ONLINE

- XMLP_DEVELOPER

- XMLP_SCHEDULER

- XMLP_TEMPLATE_DESIGNER

- ucsaaa

- ucsadmin

- ucsnetwork

- ucsoperation

- ucssecurity

- ucsstorage