After you have entered the master data, you can run the following tasks.
Managing Active Directory environments
Setting up Active Directory synchronization
Users and permissions for synchronizing with Active Directory
Communications ports and firewall configuration
Setting up the synchronization server
Creating a synchronization project for initial synchronization of an Active Directory domain
Displaying synchronization results
Customizing the synchronization configuration
Basic data for managing an Active Directory environment
Configuring synchronization in Active Directory domains
Configuring synchronization of different Active Directory domains
Updating schemas
Speeding up synchronization with revision filtering
Post-processing outstanding objects
Configuring the provisioning of memberships
Accelerating provisioning and single object synchronization
Help for the analysis of synchronization issues
Disabling synchronization
Account definitions for Active Directory user accounts
Active Directory domains
Creating an account definition
Setting up manage levels
Creating a formatting rule for IT operating data
Collecting IT operating data
Modify IT operating data
Assigning account definitions to employees
Password policies for Active Directory user accounts
Assigning account definitions to departments, cost centers, and locations
Assigning an account definition to business roles
Assigning account definitions to all employees
Assigning account definitions directly to employees
Assigning account definitions to system roles
Adding account definitions in the IT Shop
Assigning account definitions to a target system
Deleting an account definition
Predefined password policies
Using password policies
Editing password policies
Custom scripts for password requirements
Password exclusion list
Checking a password
Testing password generation
Initial password for new Active Directory user accounts
Email notifications about login data
User account names
Target system managers
Editing a server
General master data for Active Directory domains
Global account policies for an Active Directory domain
Active Directory specific master data for Active Directory domains
Specifying categories for inheriting Active Directory groups
Information about the Active Directory forest
Active Directory account policies for Active Directory domains
Active Directory user accounts
Entering Active Directory account policies
Assigning Active Directory account policies to Active Directory user accounts and Active Directory groups
How to edit a synchronization project
Monitoring the number of memberships in Active Directory groups and Active Directory containers
Linking user accounts to employees
Supported user account types
Active Directory contacts
Default user accounts
Administrative user accounts
Entering master data for Active Directory user accounts
Providing an administrative user account for one employee
Providing an administrative user account for multiple employees
Privileged user accounts
General master data of Active Directory user accounts
Password data for Active Directory user accounts
Profile and home directories
Active Directory user account login data
Remote access service dial-in permissions
Connection data for terminal servers
Extensions data for an Active Directory user account
Further identification data
Contact data for an Active Directory user account
Additional tasks for managing Active Directory user accounts
Overview of Active Directory user accounts
Changing the manage level of Active Directory user accounts
Unlocking Active Directory user accounts
Assigning Active Directory account policies to an Active Directory user account
Assigning Active Directory groups directly to an Active Directory user account
Assigning secretaries to an Active Directory user account
Moving an Active Directory user account
Assigning extended properties to Active Directory user accounts
Automatic assignment of employees to Active Directory user accounts
Updating employees when Active Directory user account are modified
Automatic creation of departments and locations based on user account information
Disabling Active Directory user accounts
Deleting and restoring Active Directory user accounts
Entering master data for Active Directory contacts
Active Directory groups
General master data for Active Directory contacts
Contact data for Active Directory contacts
Further identification data
Extensions data for Active Directory contacts
Additional tasks for managing Active Directory contacts
Overview of Active Directory contacts
Changing the manage level of Active Directory contacts
Assigning Active Directory groups directly to an Active Directory contact
Assigning secretary to an Active Directory contact
Moving an Active Directory contact
Assigning extended properties to Active Directory contacts
Deleting and restoring Active Directory contacts
Entering master data for Active Directory groups
Validity of group memberships
Assigning Active Directory groups to Active Directory user accounts, Active Directory contacts, and Active Directory computers
Active Directory security IDs
Active Directory container structures
Active Directory computers
Assigning Active Directory groups to departments, cost centers and locations
Assigning Active Directory groups to business roles
Assigning Active Directory user accounts directly to Active Directory groups
Assigning Active Directory contacts directly to an Active Directory group
Assigning Active Directory computers directly to an Active Directory group
Adding Active Directory groups to system roles
Adding Active Directory groups to the IT Shop
Adding Active Directory groups automatically to the IT Shop
Additional tasks for managing Active Directory groups
Overview of Active Directory groups
Adding Active Directory groups to Active Directory groups
Effectiveness of group memberships
Active Directory group inheritance based on categories
Assigning Active Directory account policies directly to an Active Directory group
Assigning secretaries to an Active Directory group
Moving an Active Directory group
Assigning extended properties to Active Directory groups
Deleting Active Directory groups
Default solutions for requesting Active Directory groups and group memberships
Master data for an Active Directory computer
Additional tasks for managing Active Directory computers
Active Directory printers
Active Directory locations
Reports about Active Directory objects
Configuration parameters for managing an Active Directory environment
Default project template for Active Directory
Additional tasks for managing Active Directory computers
Overview of Active Directory computers
Use this task to obtain an overview of the most important information about a computer.
To obtain an overview of a computer
- Select the Active Directory | Computers category.
- Select the computer in the result list.
- Select the Active Directory computer overview task.
Moving an Active Directory computer
NOTE: Computers can only be moved within an domain.
To move a computer
- Select the Active Directory | Computers category.
- Select the computer in the result list.
-
Select the Change master data task.
- Select the Change Active Directory container task.
- Confirm the security prompt with Yes.
- Select the new container from the Containers menu on the General tab.
- Save the changes.
Assigning Active Directory computers directly to Active Directory groups
Groups can be assigned directly or indirectly to a computer. Indirect assignment is carried out by allocating the device with which a computer is connected and groups to company structures, like departments, cost centers, locations, or business roles.
To react quickly to special requests, you can assign groups directly to a computer.
To assign a computer directly to groups
- Select the Active Directory | Computers category.
- Select the computer in the result list.
- Select the Assign groups task.
-
In the Add assignments pane, assign groups.
TIP: In the Remove assignments pane, you can remove the assignment of groups.
To remove an assignment
- Select the group and double-click
.
- Select the group and double-click
- Save the changes.
NOTE: The primary group of a computer is already assigned and is marked as Does not apply yet. Edit the computer's master data to change its primary group.