Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Let's say I have an AD group called domain\Group1, in SharePoint I create a group called Group 1. In the SharePoint group I add the corresponding domain group. Now if I add a user to the domain group, shouldn't that user have access to wherever the SharePoint group have access or does the UPS have to be set up for this? I don't won't to write back to AD or anything, just grant users access.

Thanks in advance.

share|improve this question
Is your active directory group security enabled? It should be since you were able to add it to the SharePoint group... –  Kit Menke Sep 3 '13 at 17:13

1 Answer 1

To bring in the users from Active Directory to your web application, you have to configure the User Profile Synchronization in the Central Administrator.

Please configure the below in the sharepoint server,

  1. Configure User profile Synchronization.

  2. Once after configuring, you need to set up a Timer Job which keeps the SharePoint 2010 Server in sync with the Active Directory Schedule User profile Synchronization.

share|improve this answer
Actually I don't, what happened was that the users that didn't get added had already been added manually by someone else (i.e. granted permission individually to the site). Their access were then revoked access but for some reason the users still existed at sitecoll/_layouts/people.aspx?MembershipGroupId=0 (note the 0), I deleted them from there and then they got the proper access via their AD group. From my understanding UPS is used to synch audiences, profile attributes like email etc. and to write back to AD from SharePoint if desired. –  Peter Sep 4 '13 at 0:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.