SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working on a Sharepoint 2010 server that is virtualized inside of a domain. The domain controller has Active Directory installed and thus defines the AD Groups on it.

An InfoPath 2010 form was created and installed on the SP2010 server. Inside the form, a number of views were created. Load events were created for each view such that the MemberProfileService Group Name was set as the control. So, users belonging to the Active Directory Inspectors group are only supposed to see the Inspectors view of the form, likewise for 3 other groups.

Unfortunately, the form is not functioning as expected. What must I do to ensure that the domain controller's AD Groups are being used to control view access inside my Infopath form?

Thanks much for any help/guidance.

share|improve this question
Is this still true? Does anyone know if this is true for Sharepoint 2013? – user16322 Apr 12 '13 at 14:24
up vote 2 down vote accepted

This is a known bug/design in SharePoint 2010. There are several posts/articles explaining the issue. Look here for some in-depth discussion. Also, search the thread OP's other postings for more discussion.

Currently, the SharePoint 2010 User Profile Service does not list AD Security Groups as memberships belonging to users. It syncs these groups correctly, as SharePoint is able to apply security with them. However, when viewing a member's MySite profile for example, only Distribution Lists are listed.

The userprofilememberships.asmx web service returns only distribution lists, not security groups. For now, if you wish to apply InfoPath rules based on users' AD memberships, you must utilize distribution lists.

share|improve this answer
Do you know if this applies to mail enabled security groups as well? – Lori Oct 28 '11 at 13:33
Thanks for your response. Are these distrbution lists created via Central Admin? – SidC Oct 28 '11 at 14:43
Lori - In my experience it applies to all security groups. SidC - distribution lists are created and maintained in Active Directory. – kbeal Oct 28 '11 at 21:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.