I am using Active Directory groups in LANDesk as a primary means of controlling who has access to what in LANDesk. For example, I have an AD group called "HelpDeskTeam" and this group was added to LANDesk with a certain role and certain scopes. My intention was to use Active Directory to add/remove people as needed to this group, which would in turn allow them access to LANDesk, to predetermined roles and scopes. I do not want to add individual users in LANDesk.
It turns out that, after adding a user to the "HelpDeskTeam", that user is also added into LANDesk individually. So now, in the console, I see the group "HelpDeskTeam" as well as the user, abc1234 (for example). Now, if I wanted to remove the user I would need to remove him from the AD group as well as from the console.
Is this expected behavior? If so, using AD groups in LANDesk is pointless. Hopefully I've explained this scenario clear enough. The result is definitely not as it is advertised.