How to populate members in AD Directory Users group

Question

I have a Mountain Lion Server bound to Active Directory hosted on a Windows 2003 server.  After binding I can see all active directory users and groups in Server.app however some groups will not populate the group members, namely Domain Users, Domain Computers and a few other built in groups.  These groups are default groups that are populated automatically with any user or computer joined to the domain.  This isn't that big a deal except that I want to use these groups to apply settings in profile manager.  Since the group members will not populate the settings do not apply.  It kind of makes sense that these groups would not populate since users/computers are assigned to them automatically and the mac server may not be able to read the proper data to fill these groups but this seems like a major flaw.
Any ideas to make this work?

Answer 1

Hi,
you should use OUs (an OU is they type of object (folder) that is available for you to easily create.
The object type you are asking about is a "container", and there are various reasons why an OU is more flexible (applying GPO, etc).
Refer: Delegating Administration by Using OU Objects
http://technet.microsoft.com/en-us/library/cc780779(v=ws.10).aspx   
and the sub-articles:
Administration of Default Containers and OUs
http://technet.microsoft.com/en-us/library/cc728418(v=ws.10).aspx
Delegating Administration of Account and Resource OUs
http://technet.microsoft.com/en-us/library/cc784406(v=ws.10).aspx
Also: http://technet.microsoft.com/en-us/library/cc961764.aspx
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)