Containers are represented by a hierarchical tree structure. The containers that already exist can be loaded from the Active Directory environment into the One Identity Manager database by synchronization. System containers, which are entered into the One Identity Manager database are labeled correspondingly. These are only taken into account in the synchronization when the relevant configuration option is set.
Managing Active Directory environments
Setting up Active Directory synchronization
Users and permissions for synchronizing with Active Directory
Communications ports and firewall configuration
Setting up the synchronization server
Creating a synchronization project for initial synchronization of an Active Directory domain
Displaying synchronization results
Customizing the synchronization configuration
Basic data for managing an Active Directory environment
Configuring synchronization in Active Directory domains
Configuring synchronization of different Active Directory domains
Updating schemas
Speeding up synchronization with revision filtering
Post-processing outstanding objects
Configuring the provisioning of memberships
Accelerating provisioning and single object synchronization
Help for the analysis of synchronization issues
Disabling synchronization
Account definitions for Active Directory user accounts
Active Directory domains
Creating an account definition
Setting up manage levels
Creating a formatting rule for IT operating data
Collecting IT operating data
Modify IT operating data
Assigning account definitions to employees
Password policies for Active Directory user accounts
Assigning account definitions to departments, cost centers, and locations
Assigning an account definition to business roles
Assigning account definitions to all employees
Assigning account definitions directly to employees
Assigning account definitions to system roles
Adding account definitions in the IT Shop
Assigning account definitions to a target system
Deleting an account definition
Predefined password policies
Using password policies
Editing password policies
Custom scripts for password requirements
Password exclusion list
Checking a password
Testing password generation
Initial password for new Active Directory user accounts
Email notifications about login data
User account names
Target system managers
Editing a server
General master data for Active Directory domains
Global account policies for an Active Directory domain
Active Directory specific master data for Active Directory domains
Specifying categories for inheriting Active Directory groups
Information about the Active Directory forest
Active Directory account policies for Active Directory domains
Active Directory user accounts
Entering Active Directory account policies
Assigning Active Directory account policies to Active Directory user accounts and Active Directory groups
How to edit a synchronization project
Monitoring the number of memberships in Active Directory groups and Active Directory containers
Linking user accounts to employees
Supported user account types
Active Directory contacts
Default user accounts
Administrative user accounts
Entering master data for Active Directory user accounts
Providing an administrative user account for one employee
Providing an administrative user account for multiple employees
Privileged user accounts
General master data of Active Directory user accounts
Password data for Active Directory user accounts
Profile and home directories
Active Directory user account login data
Remote access service dial-in permissions
Connection data for terminal servers
Extensions data for an Active Directory user account
Further identification data
Contact data for an Active Directory user account
Additional tasks for managing Active Directory user accounts
Overview of Active Directory user accounts
Changing the manage level of Active Directory user accounts
Unlocking Active Directory user accounts
Assigning Active Directory account policies to an Active Directory user account
Assigning Active Directory groups directly to an Active Directory user account
Assigning secretaries to an Active Directory user account
Moving an Active Directory user account
Assigning extended properties to Active Directory user accounts
Automatic assignment of employees to Active Directory user accounts
Updating employees when Active Directory user account are modified
Automatic creation of departments and locations based on user account information
Disabling Active Directory user accounts
Deleting and restoring Active Directory user accounts
Entering master data for Active Directory contacts
Active Directory groups
General master data for Active Directory contacts
Contact data for Active Directory contacts
Further identification data
Extensions data for Active Directory contacts
Additional tasks for managing Active Directory contacts
Overview of Active Directory contacts
Changing the manage level of Active Directory contacts
Assigning Active Directory groups directly to an Active Directory contact
Assigning secretary to an Active Directory contact
Moving an Active Directory contact
Assigning extended properties to Active Directory contacts
Deleting and restoring Active Directory contacts
Entering master data for Active Directory groups
Validity of group memberships
Assigning Active Directory groups to Active Directory user accounts, Active Directory contacts, and Active Directory computers
Active Directory security IDs
Active Directory container structures
Active Directory computers
Assigning Active Directory groups to departments, cost centers and locations
Assigning Active Directory groups to business roles
Assigning Active Directory user accounts directly to Active Directory groups
Assigning Active Directory contacts directly to an Active Directory group
Assigning Active Directory computers directly to an Active Directory group
Adding Active Directory groups to system roles
Adding Active Directory groups to the IT Shop
Adding Active Directory groups automatically to the IT Shop
Additional tasks for managing Active Directory groups
Overview of Active Directory groups
Adding Active Directory groups to Active Directory groups
Effectiveness of group memberships
Active Directory group inheritance based on categories
Assigning Active Directory account policies directly to an Active Directory group
Assigning secretaries to an Active Directory group
Moving an Active Directory group
Assigning extended properties to Active Directory groups
Deleting Active Directory groups
Default solutions for requesting Active Directory groups and group memberships
Master data for an Active Directory computer
Additional tasks for managing Active Directory computers
Active Directory printers
Active Directory locations
Reports about Active Directory objects
Configuration parameters for managing an Active Directory environment
Default project template for Active Directory
Active Directory container structures
Setting up Active Directory containers
To edit container master data
-
In the Manager, select the Active Directory | Contacts category.
-
Select the container in the result list and run the Change master data task.
- OR -
Click
in the result list.
-
Edit the container's master data.
- Save the changes.
Detailed information about this topic
Master data for an Active Directory container
Enter the following data for a container.
| Property | Description |
|---|---|
|
Name |
Container name. |
|
Distinguished name |
Container's distinguished name. The distinguished name for the new container is made up of the container name, the object class, the parent container, and the domain, and it cannot be modified. |
| Structural object class | Structural object class representing the object type. |
|
Object class |
List of classes defining the attributes for this object. The object classes listed are read in from the database during synchronization with the Active Directory environment. You can also enter object classes in to the input field. Other properties can be edited depending on the object class. NOTE: New containers should be set up as organizational units (ORGANIZATIONALUNIT object class). Organizational units (for example, branches, or departments) are used organize Active Directory objects, such as users, groups, and computers, in a logical way and therefore make administration of the objects easier. Organizational units can be managed in a hierarchical container structure. |
|
Domain |
Container domain |
|
Parent container |
Parent container for mapping a hierarchical container structure. The distinguished name is automatically updated using templates. |
|
Account manager |
Manager responsible for the container. To specify an account manager
|
| Target system manager |
Application role in which target system managers are specified for the container. Target system managers only edit container objects that are assigned to them. Each container can have a different target system manager assigned to it. Select the One Identity Manager application role whose members are responsible for administration of this container. Use the |
|
Street |
Street or road. |
|
Zip code |
Zip code. |
|
Location |
Location. |
|
State |
State. |
|
Country ID |
The country ID. |
|
Description |
Text field for additional explanation. |
|
Extended Function |
Filter criteria for other representations of the container. Containers marked with this option are only shown in the Active Directory user account and computer manager when advanced mode console view is active. |
| Protected from accidental deletion | Specifies whether to protect the container against accidental deletion. If this option is set, delete permissions are removed from the container object. |
next to the field.
Related topics
Additional tasks for managing Active Directory containers
After you have entered the master data, you can run the following tasks.