What is the effect of the "Use Primary Group" setting in the Domain Details of an AD Domain?

This article applies to:

• R3000

Question:

• What is the effect of the "Use Primary Group" setting in the Domain Details of an AD Domain?

Reply:

By default, the "Use Primary Group" setting in the Domain Details settings of an AD domain is turned off.  When it is turned off, the R3000 will look at all group memberships EXCEPT the Primary Group when attempting to determine what group filtering profile a user should get during authentication.  When it is turned on, the R3000 will look ONLY at the Primary Group when doing this.