Why asterisk in group names?


  • In my organization I notice that there are a bunch of groups that have names that begin with an asterisk.  The folks who created these groups are long gone so I can't ask them.
    Can anyone tell me why an Active Directory group would have a name that begins with an asterisk, what would be the purpose of that?  In some cases it looks like the asterisk may have been added automatically.
    Thank you
    Sunday, December 4, 2016 1:28 PM


  • Perhaps so the groups appear first alphabetically in ADUC, before any builtin or other groups. The "*" character is not allowed in sAMAccountNames, so the "pre-Windows 2000" name must not have this character. No process I ever heard of would add such a character to the Relative Distinguished Name of groups.

    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    • Marked as answer by Burma J Sunday, December 4, 2016 10:13 PM
    Sunday, December 4, 2016 1:54 PM