Problems creating user collections from security groups

[birchanger]

I'm testing ConfigMgr 2012R2 and trying to create a user collection based on an AD security group. The WQL for the query looks like this:

 

select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User where SMS_R_User.SecurityGroupName = "ebs\\SWU_4Matrix_Install"

 

The problem is that collection never gains any members. I'm assuming that the problem is to do with permissions on AD, although CM has discovered our users and devices correctly.

 

Any suggestions?

[ADMaster]

Do you have it set to discover groups.

I have a staff user collection and I just made the staff group the member of the collection and not each user.

I can pull the sql query for it tomorrow if you like.

 

Cheers.

[birchanger]

@ADMaster,

 

You pointed me in the right direction and now it's resolved. I'd decided that an OU in my domain had a name that was too long, so I'd changed it. My group discovery had a narrow scope so was no longer finding the groups. Furthermore our ConfigMgr host did not have read permissions on the correct OUs.