Distributing group memberships by using XML

Use the DistributeGroupMemberships procedure of the Managed Active Directory namespace to redistribute the group membership for the next group pending. This procedure must be called once for each group that is pending. Use the GetWin2KCapacityPending procedure to return the groups whose membership needs to be redistributed after a call to ExpandWin2KCapacity.

This procedure expects to be called with impersonate="1". The procedure impersonates the caller.

Example of a request that calls the DistributeGroupMemberships procedure

<request>
  <procedure>
	<execute namespace="Managed Active Directory" 
		procedure="DistributeGroupMemberships" impersonate="1">
	<executeData>
		<organization>LDAP://ou=Hosting,dc=contoso01,dc=com</organization>
		<capacityType>UserN</capacityType>
	</executeData>
	<after source="executeData" destination="data"  />
	</execute> 
  </procedure>
</request>

Input for DistributeGroupMemberships

The following input is valid for this request:

• LDAP path of the organization

  Use the <organization> element to specify the Lightweight Directory Access Protocol (LDAP) path of the organization for which group membership needs to be distributed.

  <organization>LDAP://LDAP path of the organization</group>
  

• Capacity type

  Use the <capacityType> element to specify the capacity type of the group. Possible values are:

  • UserN

    This type is used to limit the users per organization.

  • ChildOrgN

    This type is used to limit the child organizations per organization.

• <capacityType>UserN|ChildOrgN</capacityType>
  

• Preferred domain controller (optional)

  By using the <preferredDomainController> element, you can specify the domain controller that you want to use for this request. Using a single preferred domain controller eliminates replication delays that arise between multiple controllers.

  <preferredDomainController>your domain controller</preferredDomainController>
  

Typical response for DistributeGroupMemberships

This procedure returns a <pending> tag containing the pending groups, if any groups are pending. This procedure also returns the group whose membership was redistributed during this call.

<response>
  <data>
	<executeData>
	<organization>LDAP://ou=Hosting,dc=contoso01,dc=com</organization>
	<capacityType>UserN</capacityType>
	<processed>LDAP://CN=AllUsers@Hosting,CN=_Private,OU=Hosting,DC=contoso01,DC=com</processed>
	</executeData>
  </data>
</response>

Important

• Although Active Directory is not case sensitive for elements such as the Lightweight Directory Access Protocol (LDAP) path, XML is case sensitive. To ensure that the procedure executes appropriately, specify all tags, elements, and data using uppercase and lowercase letters exactly as shown in the XML examples. For additional guidelines on how to use XML, see the Microsoft Web site (http://www.microsoft.com/).