Security Groups

It is recommended that you use Active Directory Security Groups to apply permissions to Verification Policies. By doing this, you can automate adding new users into the Password Reset Portal, apply a Verification Policy to their account, and send them automatic Enrollment emails.

If required, there are also some debugging options available, if you experience any issues with importing and synchronizing Security Groups.

Nested Security Groups

Nested Security Groups are supported in Passwordstate, but we do not maintain the nesting structure of those security groups. Instead, all the members of the nested Security Groups, will show in Passwordstate as members of the "parent" security group.

Please Note: Nested Security Groups are only supported within the same Active Directory Domain i.e. you cannot nest a Security Group from Domain B, beneath a Security Group from Domain A.