Synchronizing groups with Microsoft Active Directory

You can use the BlackBerry Directory Sync Tool to synchronize the membership of security groups and distribution groups in Microsoft Active Directory with groups in the Universal Device Service. After you map one-to-one relationships between Microsoft Active Directory groups and Universal Device Service groups, you can start the synchronization process manually, or you can use a task scheduling application to run the synchronization at a set interval.

When you run a synchronization process using the BlackBerry Directory Sync Tool, it compares the Microsoft Active Directory group to the Universal Device Service group that you mapped it to. If the tool finds any differences in group membership, it assigns user accounts to, or removes user accounts from, the Universal Device Service group until the membership matches the Microsoft Active Directory group.

For more information about the BlackBerry Directory Sync Tool, visit www.blackberry.com/go/serverdocs to read the BlackBerry Resource Kit for BlackBerry Enterprise Service 10 documentation.