Q1) Created user group and linked to AD. I get no errors, I can login with the credentials of the AD user. However, no matter what I do I see nothing when I log in. No groups , devices, sensors. I have setup the "Access Rights" on the groups, I can see its being inherited. I have even used the "Revert children's access rights to inherited" to force the child objects to inherit the rights. I have tried to setup the "Access Rights" manually on some sensors with the specific group the user is member of.
I still have no luck.
Q2) When using a group from AD that has a nested groups of users, is this going to work?
thanx Petr
PRTG ver.: 9.1.4.1840
Article Comments
I will try the upgrade and come back to update the info.
The second question remains. To my tests it appears that only groups with users directly inside are working. If the AD group has another group in it, the users from the sub-group have no access. Can you please confirm/deny this ?
Best Regards
Feb, 2012 - Permalink
Nested AD-Groups haven't been tested indeed I'm afraid, but this should then fail at the login already.
Feb, 2012 - Permalink
Well, The new release 9.2.0 fixed the problem with the objects not being visible. However, the fact remains that only users object directly existing in linked AD group are authorized access.
It appears nested groups are not supported. :O( I hope this is coming in the future, as in Enterprise environment it is practically impossible to exist without.
Thanx
Feb, 2012 - Permalink
hello Paessler Team,
Nested AD Groups does not seem to work. Still in latest Version 18. Are there any plans or will the authentication remain the same also for the next 10 Years?
Regards
Jan, 2019 - Permalink
Hello Michele,
Still no plans, we received such requests in the past as well, but all in all demand was not that high so far in order to consider it. Feel free to propose the feature as mentioned here.
Kind regards,
Erhard
Jan, 2019 - Permalink
There is a suggestion for the nested groups feature at https://helpdesk.paessler.com/en/support/solutions/articles/87500-support-for-nested-active-directory-groups. Please vote for it!
May, 2022 - Permalink
Hello,
first of all, can you please update to the latest version (9.2) of PRTG, there were a few minor changes and fixes in the Active Directory integration since 9.1.4. Furthermore, when being logged in as "prtgadmin" please try a right-click on the objects the Active Directory User(s) should see and then go to "Edit"->"Access Rights", this will bring you to a page where you exactly see the rights (inherited and directly set) for the object and should shed light on any faults or missing settings.
best regards.
Jan, 2012 - Permalink