Active Directory Sites
By specifying Active Directory sites in the domain connection settings you select the site in which you want Password Manager to replicate changes as soon as they occur in other sites. This reduces downtime that users may experience when your environment has several Active Directory sites and changes do not get immediately replicated between the sites.
To specify Active Directory sites
- On the Administration site, select the Management Policy you want to configure and click the User Scope link.
- On the User Scope page, select the domain connection for which you want to specify Active Directory sites and click Edit.
- On the User Scope Settings for #Domain# page, click Edit.
- On the Advanced Options tab of the Edit Domain Connection dialog, click Add under the Active Directory sites table, select required sites, and click Add. You can use the autofill option to automatically populate the table with all available sites from the current domain.
- Click Save and select how you want to apply the updated settings. You can either apply the new settings for this user scope only, or everywhere where this domain connection is used.
Changes Propagation
After you specify the Active Directory sites in which you want to push changes, you can also select what kind of changes to propagate. The following options are available:
- Propagate changes related to the user’s account in Active Directory
- Propagate changes related to the user’s Questions and Answers profile
- Propagate password-related changes
Password Policies
With Password Manager you can create custom password policies that extend the system password policy rules.
The domain must be added in order for Password Manager to read the Domain Password Policies in order to send email notifications to users.To create and manage password policies, you need to add a domain connection on the Password Policies tab of the Administration site. When adding the domain connection, you specify the domain to which password policies will be applied and the credentials that will be used to access the domain.
To add domain connection
- On the home page of the Administration site, click the Password Policies tab.
- Click Add domain connection to add a domain for which you want to create password policies.
- If domain connections already exist, select a domain connection from the list. If you want to create a new connection, click Add domain connection.
- If you selected to create the new domain connection, in the Add New Domain Connection dialog, configure the following options:
- In the Domain name text box, type in the name of the domain that you want to add.
- In the Domain alias text box, type the alias for the domain which will be used to address the domain on the Self-Service site. This field is required because you can reuse the domain connection in the user scope.
- To have Password Manager access the domain using the Password Manager Service account, click Password Manager Service account. Otherwise, click Specified user name and password and then enter user name and password in the corresponding text boxes. Note, that if Password Manager Service account is used to access the domain, it should have the required permissions.
- Click Save.
Outgoing Mail Servers
Outgoing Mail Servers
You can configure one or more outgoing mail servers to send email notifications. If there are several servers, Password Manager will first attempt to use the top one in the list.
To add outgoing mail servers (SMTP)
-
Connect to the Administration site by typing the Administration site URL in the address bar of your Web browser. By default, the URL is http://<ComputerName>/PMAdmin/.
|
|
NOTE: When prompted to log in, provide your domain user name in a domainname\username format. |
- On the menu bar, click General Settings|SMTP Servers and then click Add SMTP server.
- In the Add SMTP Server dialog box, configure the following options and click Save:
Table 1:
|
Server name |
Type the SMTP server name.
If the SMTP server uses the port which is different from the default SMTP port 25, you may specify the port using the following format:
<server name>:<port number>
where <server name> is the server name and <port number> is the port number used for SMTP communication. |
|
Sender email address |
Type the sender's email address. |
|
This server requires authentication |
Select if the SMTP server requires authentication. |
|
User name |
Type the user name under which Password Manager will access the SMTP server. |
|
Password |
Type the password for this account. |
|
Confirm password |
Re-type the password. |
|
The server requires an encrypted connection (SSL) |
Select if the SMTP server requires an encrypted connection (SSL). |
- Follow steps 2-3 to add any additional SMTP servers.
- Use the Move Up and Move Down buttons to change the order of the SMTP servers in the list.
The order of the servers in the list specifies how Password Manager uses the servers to send notification mail messages. Password Manager will first attempt to use the servers at the top of the list.
To remove a server from the list of outgoing SMTP mail servers
-
Connect to the Administration site by typing the Administration site URL in the address bar of your Web browser. By default, the URL is http://<ComputerName>/PMAdmin/.
|
|
NOTE: When prompted to log in, provide your domain user name in a domainname\username format. |
- On the menu bar, click General Settings, and then click the SMTP Servers tab.
- On the SMTP Servers page, select the SMTP server you want to remove and click Remove.
Reporting
Reporting is an optional component in Password Manager. To use the reporting feature, you must have an SQL database. For more information, see the Administrator Guide.
