Phone  +49 89 215 442 400

FirstWare DynamicGroup

Active Directory dynamic security groups

Use the AD automation tool to automate group memberships of AD objects.
Avoid security risks with self-updating groups.


FirstWare DynamicGroup 2018

  • Self-updating AD groups
  • Bulk + Smart Creation of groups
  • Exclude lists / Include lists
  • Flat group option (for nested groups)
  • Many new functionalities
  • 30 days free trial

>> Solution scenarios

Quote -requestDownload

Version: DynamicGroup 2018.0 (13.12.2018)


  • Create group memberships with an LDAP filter
  • Smart creation of groups based on attributes and OUs
  • Bulk import for mass creation of hundreds of groups 
  • Copy groups as templates
  • Set a search root as the entry point
  • Set up an include list with permanent members of the group
  • Set up an exclude list of users that must not be in this group
  • Preview a dynamic group to see the potential members
  • Configure the time interval for filling or emptying of the group

New in DynamicGroup 2018

Selection of new features in DynamicGroup 2018

  New features

  • Bulk import
    • Quick mass creation of hundreds of dynamic groups
    • Import via csv files
  • Smart Creation Wizard
    • Fully automated creation of dynamic groups
    • Based on attributes or OUs
    • Attribute-based: create department groups based on entries in the AD attribute "department" in all user accounts
    • OU-based: reads OU structure and creates dynamic OU groups
    • Select users, groups, computers and/or contacts 
    • Special filter options to create dynamic groups
  • Copy dynamic groups as templates
    • Copy Group
    • Use templates with most important dynamic attributes
  • Generate prefixes to identify groups straight away
  • Delete multiple groups at once
  • Automatic special character replacement in the Query Builder
    • Special characters can be used for queries
    • Automatic replacement when using the Query Builder to create a new LDAP query for a group

Design & User interface

  • Intuitive and user-friendly (design similar to Active Directory User and Computers)
  • Optimised user interface
  • Clean design for improved usability

Windows Server 2016 compatibility

  • Supports Windows Server 2016 environments


Dynamic groups in AD Dynamic department groups 
Dynamic OU groups  


Create Dynamic Groups
Dynamische Gruppe - Flat Group
Search & Query conditions

Create dynamic group
with all users from Munich

Flat group option
only users will become members of the group, not the selected groups
Search & Query conditions
only users from a specific OU and location=Munich
Dynamische Mitgliedschaften
Dynamic Group service scheduled
Dynamic Group smart creation

Dynamic group memberships
list of all users, who are members of the group

Scheduled service
  update groups periodically or at various preset times
 Smart Creation
  Clever fast creation of groups based on attributes or OUs
Dynamic Group smart creation completed
Dynamic Group Massenalnage
Dynamic Group Bulk Import

Smart Creation
Groups created with attribute-based filter "department" of all users 

Bulk Import
Fast mass creation of new groups with the help of csv files
Mass creation
Bulk Import completed after a few seconds with error log

System Requirements

System requirements

Microsoft Windows Server 2008 (Server) or higher
Microsoft Windows Vista, 7, 8, 8.1, 10 (Client)


.NET Version 4.5 (or higher)


Active Directory
(functional level Windows Server 2003 or higher)


Download License
30 days trial
  Fully functional version
Version FirstWare DynamicGroup 2018.0
Release / Last Update 2018/04/01
Licensing based on the number of Managed Users (user objects)
  Please send us a short request for a quote.

 Quote -request

Release History

2018-12-13 +++ Release DynamicGroup 2018.0.134.7846

DynamicGroup Console

  • Hotfix include-/exclude lists with deleted objects

2018-11-13 +++ Release DynamicGroup 2018.0.127.7838

DynamicGroup Console

  • Updated compatitbility for special character replacement in the LDAP query

2018-09-25 +++ Release DynamicGroup 2018.0.122.7823

Bastion support

  • Privileged Access Management Accounts from AD Bastion admin environment support

2018-04-01 +++ Release DynamicGroup 2018.0

Dynamic Group Console

  • Added new self-creating groups and mass editing functionalities
  • Developed new "Smart Creation Wizard" to create groups based on attributes and OUs
  • Developed new "Bulk Import Wizard" which allows the upload of multiple groups to the console based on csv files
  • Added "Copy Group" function to copy dynamic groups as templates
  • New option to create prefixes which can be added to the group name when creating a new group  
  • Added the option to delete multiple groups at once
  • Automatic special character replacement in the LDAP query

Windows Server 2016 compatibility and security

  • With the new server version from Microsoft, extended firewall rules were made standard that prevented Dynamic Group from installing the service remotely. This issue has been resolved and the service can be installed and used normally in Windows Server 2016 environments.

  • The DynamicGroup Console will not start any longer if it is installed on a domain controller. This is to prevent certain security issues, since DynamicGroup would require elevated rights for many operations on a domain controller.


  • Updated documentation: New features included


  • FirstWare DynamicGroup 2018 includes a number of bugfixes from the previous version.

2017-05-31 +++ Release DynamicGroup 2015.2.49.7270

Dynamic Group Console

  • Updated filter compatibility for older versions using '/' in LDAP filters

2017-03-22 +++ Release DynamicGroup 2015.2

Dynamic Group Console

  • If you changed both Query Conditions and LDAP filter manually in any query settings before saving, Dynamic Group will now ask you to convert them first to make sure which one to use
  • Corrected various spelling and grammar mistakes
  • If you change an existing condition in the Query Builder for the Member Query or OU Filter, the Apply button will now be correctly enabled
  • If you change the SamAccountName (Group Name) of an existing group, the Common Name (cn) will automatically be set to the same value
  • If there are any special characters in the SamAccountName while creating a group, these special characters will be removed by Dynamic Group

Dynamic Group Service

  • Previously, the Dynamic Group Service ignored any group that had no member filter, so groups using only Include/Exclude lists were not calculated by the service
  • This was changed due to the fact that a) it is allowed to that in the Console and b) it is a useful tool when simply trying to reduce group nesting with the Flat Group option


  • Updated documentation with changes in this update
  • Added a chapter on how to use special characters (e.g. brackets) in LDAP filters


  • Minor Bugs have been fixed

2015-11-26 +++ Release DynamicGroup 2015.1.37.4729


  • "Update Group" Button disabled for regular groups


  • Performance: List of dynamic groups in service will be deleted after each run now
  • Service reinitialization after each recalculation of the service timer
  • Service reinitialization in interval mode only when the interval period changed

2015-10-14 +++ Release DynamicGroup 2015.1

New Features

  • Item Counter in the Members, MemberOf Tab
  • Refresh button & Update now button


  • Install Service
    • Default setting changed
    • Info added
  • Install Service: install path calculation changed
  • Pop up windows with success messages
    • installation
    • license installation
    • save/change of groups
  • Pop up warning messages
    • Initial Configuration: Integrated lists
    • Extend schema
  • Object search: drop down list to switch classes
  • Group Preview: Information on red groups added (out of group scope)
  • Attribute selection for lists and settings does not show systemOnly groups anymore
  • 5 minor cosmetical corrections


  • 8 minor bugs fixed

2015-09-01 +++ Release DynamicGroup 2015.0

  • Major Release
  • See "New in DynamicGroup 2015"


  • FirstWare DynamicGroup 2018

    100 groups in 10 seconds

  • FirstWare DynamicGroup 2015.2 Update

    DynamicGroup 2015.2 Update online

  • AD Consolidation Project

    AD Migration with Dell Migration Manager for Active Directory

  • DynamicGroup 2015 Release

    FirstWare-DynamicGroup 2015 released

  • AD Specialists in Frankfurt

    AD Consultants running in Frankfurt

  • Integration of Cloud Services like Office 365

    Integration of Cloud services to the IT infrastructure - Office 365.

  • Active Directory attributes and Outlook signature

    Using Active Directory attributes for the Outlook signature

  • Delegate Active Directory User Management to Human Resources

    Easily delegate AD User Management to HR with FirstWare-Admin

  • Access Based Enumeration Traverse Folder Service

    Building a self-administrating Access Based Enumeration authorization structure

  • Identity Management for Small to Medium-Sized Enterprises (SME)

    Assign Active Directory a central role as Active Directory based Identity Management System.


©2019 FirstAttribute AG - All rights reserved.

Realization Site Point GmbH

Legal notice