9.1 Before you start: Active Directory

Groups based on AD groups, AD users, AD computers or e-mail addresses need a working directory connection. Configure Administration → Settings → Active Directory (section 6.5) first:

• While Active Directory is not enabled, the AD group / user / e-mail option is not offered in Assign machines by.
• The AD picker searches the directory live. If the connection fails, the picker shows Directory search failed — … with the reason.
• Membership is looked up for the user signed in on each machine, through the same connection. With several domains configured, the lookup uses the domain the machine reports.

Groups by machine name or operating system work without Active Directory.