ADS_GROUP_TYPE_ENUM

The ADS_GROUP_TYPE_ENUM enumeration specifies the type of group objects in ADSI.

typedef enum 
{
  ADS_GROUP_TYPE_GLOBAL_GROUP = 0x00000002, 
  ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP = 0x00000004, 
  ADS_GROUP_TYPE_LOCAL_GROUP = 0x00000004, 
  ADS_GROUP_TYPE_UNIVERSAL_GROUP = 0x00000008, 
  ADS_GROUP_TYPE_SECURITY_ENABLED = 0x80000000
} ADS_GROUP_TYPE_ENUM;

Values

ADS_GROUP_TYPE_GLOBAL_GROUP

Specifies a group that can contain accounts from the same domain and other global groups from the same domain. This type of group can be exported to a different domain.

ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP

Specifies a group that can contain accounts from any domain in the forest, other domain local groups from the same domain, global groups from any domain in the forest, and universal groups. This type of group cannot be included in access-control lists of resources in other domains.

This type of group is intended for use with the LDAP provider.

ADS_GROUP_TYPE_LOCAL_GROUP

Specifies a group that is identical to the ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP group, but is intended for use with the WinNT provider.

ADS_GROUP_TYPE_UNIVERSAL_GROUP

Specifies a group that can contain accounts from any domain, global groups from any domain, and other universal groups. This type of group cannot contain domain local groups.

ADS_GROUP_TYPE_SECURITY_ENABLED

Specifies a group that is security enabled. This group can be used to apply an access-control list on an ADSI object or a file system.

Remarks

Because VBScript cannot read data from a type library, VBScript applications do not understand recognize constants, as defined above. Use the numerical constants, instead, to set the appropriate flags in your VBScript application. To use the symbolic constants as a good programming practice, write explicit declarations of such constants, as done here, in your VBScript application.

Example Code [Visual Basic]

The following code example shows how you might use elements of this enumeration.

[Visual Basic]
Dim rootDSE // IADs
Dim dom // IADsContainer
Dim grp // IADs
Public Const ADS_GROUP_TYPE_GLOBAL_GROUP = &H2
Public Const ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP = &H4
Public Const ADS_GROUP_TYPE_UNIVERSAL_GROUP = &H8
Public Const ADS_GROUP_TYPE_SECURITY_ENABLED = &H80000000

On Error Resume Next
 
Set rootDSE = GetObject("LDAP://RootDSE")
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Exit Sub
End If

Set dom = GetObject("LDAP://" & rootDSE.Get("defaultNamingContext"))
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Set rootDSE = Nothing
	Exit Sub
End If

Set rootDSE = Nothing
 
' Creating Secured Global Group.
Set grp = dom.Create("group", "CN=group1")
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Set dom = Nothing
	Exit Sub
End If

grp.Put "samAccountName", "group1"
grp.Put "groupType", ADS_GROUP_TYPE_GLOBAL_GROUP Or ADS_GROUP_TYPE_SECURITY_ENABLED
grp.SetInfo
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Set dom = Nothing
	Set grp = Nothing
	Exit Sub
End If
 
Set grp = Nothing
 
' Creating Distribution List Local Group.
Set grp = dom.Create("group", "CN=group2")
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Set dom = Nothing
	Exit Sub
End If

grp.Put "samAccountName", "group2"
grp.Put "groupType", ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP
grp.SetInfo
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Set dom = Nothing
	Set grp = Nothing
	Exit Sub
End If

Set grp = Nothing
 
' Create Secured Universal Group (ONLY IN NATIVE MODE).
Set grp = dom.Create("group", "CN=group3")
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
	Set dom = Nothing
	Exit Sub
End If

Set grp = Nothing

grp.Put "samAccountName", "group3"
grp.Put "groupType", ADS_GROUP_TYPE_UNIVERSAL_GROUP Or ADS_GROUP_TYPE_SECURITY_ENABLED
grp.SetInfo
If (Err.Number<>0) Then
	MsgBox("An error has occurred. " & Err.Number)
End If

Set dom = Nothing
Set grp = Nothing

Requirements

Client: Included in Windows XP and Windows 2000 Professional.
Server: Included in Windows Server 2003 and Windows 2000 Server.
Redistributable: Requires Active Directory Client Extension on Windows NT 4.0 SP6a and Windows 95/98/Me.
Header: Declared in Iads.h.

See Also

ADSI Enumerations