Security Compliance

Change ARM group wizard strategy type

How to manipulate your database to change the strategy type to be used for the ARM group configuration wizard, for example, using local groups instead of global groups.

First published date

5/24/2019 9:15 PM

Last published date

9/22/2025 3:28 PM

Overview

This article details how to manipulate your database to change the strategy type to be used for the ARM group configuration wizard, for example, using local groups instead of global groups.

Warning! SolarWinds strongly recommends that you back up your database before making any edits to your system database. You should only edit the database if you are experienced and confident in doing so. SolarWinds cannot guarantee resolutions to any corrupt or missing data resulting from making database edits.

Product section

Access Rights Manager

Cause

When you first configure the ARM group wizard, you have to choose which group strategy should be used. To prevent errors in configurations, it is not possible to change this selection once set, but occasionally it becomes necessary to change the group strategy, for example, using local groups instead of global groups. In this case, it is necessary to manipulate the database.

Resolution

Stop the ARM service.
Connect to your database using SQL Server Management Studio.
Backup your database.
Right-click on your ARM database and select "New Query".
Execute the following query:

-- Scripts are not supported under any SolarWinds support program or service. 
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further 
-- disclaims all warranties including, without limitation, any implied warranties 
-- of merchantability or of fitness for a particular purpose. The risk arising 
-- out of the use or performance of the scripts and documentation stays with you. 
-- In no event shall SolarWinds or anyone else involved in the creation, 
-- production, or delivery of the scripts be liable for any damages whatsoever 
-- (including, without limitation, damages for loss of business profits, business 
-- interruption, loss of business information, or other pecuniary loss) arising 
-- out of the use of or inability to use the scripts or documentation.

SELECT _id FROM dbo._server_configuration_object_values WHERE _property LIKE 'usegroupwizard'

6. Note the _id value from your result
7.Execute one of the following queries to update the group wizard strategy value to reflect the new strategy used:

STRATEGY	DETAILS	QUERY
`UseLocalGroups`	ARM creates permission groups as domain local security groups	-- Scripts are not supported under any SolarWinds support program or service. -- Scripts are provided AS IS without warranty of any kind. SolarWinds further -- disclaims all warranties including, without limitation, any implied warranties -- of merchantability or of fitness for a particular purpose. The risk arising -- out of the use or performance of the scripts and documentation stays with you. -- In no event shall SolarWinds or anyone else involved in the creation, -- production, or delivery of the scripts be liable for any damages whatsoever -- (including, without limitation, damages for loss of business profits, business -- interruption, loss of business information, or other pecuniary loss) arising -- out of the use of or inability to use the scripts or documentation. UPDATE dbo._server_configuration_object_values SET _value = 'UseLocalGroups, IsValid, RealExecution' WHERE _property LIKE 'groupwizardstrategy' AND _id LIKE 'the result _id from your first query'
`UseGlobalGroups`	ARM creates permission groups as global security groups	-- Scripts are not supported under any SolarWinds support program or service. -- Scripts are provided AS IS without warranty of any kind. SolarWinds further -- disclaims all warranties including, without limitation, any implied warranties -- of merchantability or of fitness for a particular purpose. The risk arising -- out of the use or performance of the scripts and documentation stays with you. -- In no event shall SolarWinds or anyone else involved in the creation, -- production, or delivery of the scripts be liable for any damages whatsoever -- (including, without limitation, damages for loss of business profits, business -- interruption, loss of business information, or other pecuniary loss) arising -- out of the use of or inability to use the scripts or documentation. UPDATE dbo._server_configuration_object_values SET _value = 'UseGlobalGroups, IsValid, RealExecution' WHERE _property LIKE 'groupwizardstrategy' AND _id LIKE 'the result _id from your first query'
`UseUniversalGroups`	ARM creates permission groups as universal security groups	-- Scripts are not supported under any SolarWinds support program or service. -- Scripts are provided AS IS without warranty of any kind. SolarWinds further -- disclaims all warranties including, without limitation, any implied warranties -- of merchantability or of fitness for a particular purpose. The risk arising -- out of the use or performance of the scripts and documentation stays with you. -- In no event shall SolarWinds or anyone else involved in the creation, -- production, or delivery of the scripts be liable for any damages whatsoever -- (including, without limitation, damages for loss of business profits, business -- interruption, loss of business information, or other pecuniary loss) arising -- out of the use of or inability to use the scripts or documentation. UPDATE dbo._server_configuration_object_values SET _value = 'UseUniversalGroups, IsValid, RealExecution' WHERE _property LIKE 'groupwizardstrategy' AND _id LIKE 'the result _id from your first query'
`UseLocalAndGlobalGroups`	ARM creates a domain local permission group as well as a global group and nest them accordingly	-- Scripts are not supported under any SolarWinds support program or service. -- Scripts are provided AS IS without warranty of any kind. SolarWinds further -- disclaims all warranties including, without limitation, any implied warranties -- of merchantability or of fitness for a particular purpose. The risk arising -- out of the use or performance of the scripts and documentation stays with you. -- In no event shall SolarWinds or anyone else involved in the creation, -- production, or delivery of the scripts be liable for any damages whatsoever -- (including, without limitation, damages for loss of business profits, business -- interruption, loss of business information, or other pecuniary loss) arising -- out of the use of or inability to use the scripts or documentation. UPDATE dbo._server_configuration_object_values SET _value = 'UseLocalAndGlobalGroups, IsValid, RealExecution' WHERE _property LIKE 'groupwizardstrategy' AND _id LIKE 'the result _id from your first query'
`CrossDomainHandling`	ARM creates the global groups in the domain that contains the user objects	-- Scripts are not supported under any SolarWinds support program or service. -- Scripts are provided AS IS without warranty of any kind. SolarWinds further -- disclaims all warranties including, without limitation, any implied warranties -- of merchantability or of fitness for a particular purpose. The risk arising -- out of the use or performance of the scripts and documentation stays with you. -- In no event shall SolarWinds or anyone else involved in the creation, -- production, or delivery of the scripts be liable for any damages whatsoever -- (including, without limitation, damages for loss of business profits, business -- interruption, loss of business information, or other pecuniary loss) arising -- out of the use of or inability to use the scripts or documentation. UPDATE dbo._server_configuration_object_values SET _value = 'UseLocalAndGlobalGroups, CrossDomainHandling, IsValid, RealExecution' WHERE _property LIKE 'groupwizardstrategy' AND _id LIKE 'the result _id from your first query'

Ensure that all old ARM groups are converted to the new strategy type. If old groups are not converted, ARM will create new groups on these folders, resulting in two separate permission groups.
Restart the ARM service.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.