Technical Tip: Setup a LDAP profile on FortiMail for Windows Active Directory group query for group based recipient policy matching

1. Refer to Configuring LDAP profiles for complete steps on how to set up the Default Bind Options and User Query Options for Windows Active Directory.
2. Configure the Group Query Options. 

• Group membership attribute: For Windows Active Directory, this is memberOf.
• Select Use group name with base DN as group DN.
• Group base DN - Enter the DN of the Group Container in the Active Directory. In this example, the Groups are all configured in the User container.

Here is how to retrieve the DN of the Group Container from Active Directory:

• Group name attribute: For Windows Active Directory, this is CN. Ensure the check mark beside Group Query Options is selected.
• Save the configuration. Scroll down to the bottom of the page and select Apply.
• Test the configuration. select 'Test LDAP Query...'.