Hi,
In the SharePoint 2007 profile import I was able to have the profile import retrieve users from groups that were members of a group. For example:
ParentGroup
-ChildGroup1
-ChildGroup2
-ChildGroup3
I did this by setting the Scope to Subtree, and by having the following filter:
(&(objectCategory=Person)(objectClass=User)(memberOf:1.2.840.113556.1.4.1941:=CN=ParentGroup,OU=Groups,DC=myCompany,DC=ads))
In the above structure the parent group has no users, but child groups do. The result is that all users within the ChildGroups will get imported. This makes it so that each physical location (our company has several sites around the world) can have their own ChildGroup for easily assigning permissions to that particular site, but then we can also have all users rolled up into one ParentGroup for more general permission assignment.
I want to do this same thing in SharePoint 2013 but I cannot seem to get it to work. I don't see any place to set the scope. It seems that in trying to simplify the configuration MS has actually made it harder. Any ideas how to accomplish this?
Thanks,