It’s not possible to copy Active Directory accounts, which makes it cumbersome to transfer group memberships from one user to another.
This is a common practice in SMB space. To onboard a new hire, you copy the AD user object of their closest match, say you an “Administrative Assisstant”. to create a new user, MSPs will commonly copy an existing user with that same job function, so the new user gets created and is a member of the same groups.
Comments (1 comment)