ForestSafe groups are implemented as Active directory groups. The following example shows an actual mapping between ForestSafe helpdesk users and a ForestSafe Administrator group:
Mapping work can be carried out without having to use Active Directory Users and Computer. The ForestSafe Express End Users control can join and unjoin users to groups, and it also keeps an audit trail of the change.
