Karthik,
Not 100% sure what you're asking for here, but it's certainly possible for IDM to handle AD group membership. On many projects I've worked on, one of the primary goals was to reduce use of command line and Windows tools such as ADUC and replace them with a Web Based, auditable system such as IDM. It's also a great tool for the Service Desk as it gives them a central location for doing all user Administration tasks. AD, SAP, etc...
If you can give me a better idea of what the use cases are I can try to help you in more detail.
Matt
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.