Using OD for policies but it wont use windows security groups

[AlexPilot]

I have done an AD-OD intergration so I have a mac mini running OS X Server that is bound to Active Directory. All our iMacs are bound to AD & the OD server.

I am trying to make changes in workgroup manager to lock down the machines. I have made a user group called managed_pupils in workgroup manager, but when I add members it is only hwen I add users individually that the policies work. If I add a security group of say 'all pupils' which all our pupil accounts are members of it does not work.

Can anyone tell me if I am going to have to add the users individually?

[nicklec]

I'm not 100% certain if its not more complicated as our server was setup for us (Toucan) but we have a relationship in WGM that ties our AD student group to an OD student group and so on - then we can apply OD policies to these groups!

[HodgeHi]

No you can add AD groups to the OD groups but IIRC you cannot nest groups. For example, OD_Staff_Group > AD_Staff_Group > AD Users will work but OD_Staff_Group > AD_Staff_Group > Year_1_Group > AD User more than likely won't. I don't know if this has changed in Leopard though but i could never get this to work in Tiger