I am in need of a report where I can report on the permissions within AD but EXCLUDE all accounts whose SAMAccountName which begin with "a.". So I added a parameter to the report where this filter is hard coded into the report. The result is that the filter is followed on the directly added users but not in the nested groups.
How can I pass that exclusion filter to the SP which is enumerating the nested groups?
The history of this is that the domain has had several management 'styles' over the years and needs to be cleaned up. In AD, it was decided that all administrative accounts would begin with A. and then the SAMAccountName as in "a.usernamegoeshere".
What we need to do is to be able to run a report on AD permissions where we can exclude these users and other built in accounts and groups as required AND have that exclusion filter also apply to the nested groups.
So if a user a.username has some permissions in an OU then that account would not be included in the report. We have that now. But, when the account is nested in a group, is it displayed. It is here where we need that filter also applied to the return set of the stored procedure used to enumerate the nested groups.
Is this even possible?
