You’ve followed all the best practices and documentation. Your eDirectory trees are healthy and replicating with no errors. Time is in synchronization and ndsrepair shows no errors or external references hanging out there.
So, what do you do when eDirectory gets a request to remove 20,000 members from a group and replicates the change to all of the replicas?
Let’s face the fact, assigning iPrint printers in iManager, especially if the users are in a different container than the iPrint Printer, can become very tedious and time consuming. First you have to wait for the browse window to choose a printer, then wait for the browse window to browse for the users or groups, and finally select all of your users. Well what if you had 5 executives that needed to have access to every Xerox Printer in the organization and these printers existed in multiple containers? Let’s say there were 35 of these printers. This could take hours. I’ll demonstrate how to do it in less than 5 minutes.
Andrei Karyagin explains how to redirect iChain users, based on what group they are a member of.
Father Ramon explains how to remove IDM group memberships individually.
These sample policies from Father Ramon illustrate how to set up RegEx matching strings that work across containers.
This tip from Jack Shreve explains how to add a new eDirectory group, based on an existing group with similar membership.
You can create nested groups in eDirectory 8.8.2 more easily, thanks to this tip from Mada Sailaja.
Perry Nuffer explains groups and group membership in Lotus Notes, and how to get users associated properly.