-
Title
How to set minimum UID to be assigned ? or Is there a parameter or setting to alter the start UID? -
Description
When using the "Generate Unique ID" on the UNIX tab (from the "Properties" of a user account within Active Directory Users and Computers), how to set a minimum UID.
Is there a parameter to set somewhere that would alter the starting UID number for all AD logins?
-
Resolution
The local UID are usually less than 1000 so setting this above 1000 is recommended to avoid creating conflicts with local accounts.In 4.x and up, the global unix options are stored in the QAS application configuration (QAC) container. You will need read and write permission on the QAS application configuration (QAC) container.
RESOLUTION 1:
Instructions for QAS 4.x
1 - Go to the QAS Control Center
2- Click on Preferences on the left panel
3 - Select Modify Global Unix Options ...
4 - Click on the blue "Modify Global Unix Options..."
5- Enter in a Minimum UID Numbers
6 - Close the QAS control Center and then reopen to verify change was set.
We recommend something above 1000. We also recommend using Generate unique UID based on GUIDHash
RESOLUTION 2:
Instruction for QAS 3.x
Please note that QAS 3.x is no longer supported and you should upgrade to a supported version of the product.
The QAS ID Generation Algorithm can be modified with the configuration utility located on the Windows Server where Authenitication Services has been installed, go to Start menu: "Start | Programs | Quest Software | Vintela Authentication Services | Configuration Utility" . There are two options available:
1) Lowest unallocated ID.
2) One more than highest allocated.
So to have VAS assign higher UIDs, create the first user and assign them a UID of say, 2500, and all subsequent UIDs will be higher. -
Additional Information
The Quest Application Configuration (QAC) is an Active Directory object used to store QAS product information such as license and default settings for QAS 4.x components. It consists of multiple nested objects of the objectClass ‘Container’ inside a container with the name cn={786E0064-A470-46B9-83FB-C7539C9FA27C}. For more information about the QAC please read the following https://support.quest.com/authentication-services/kb/71908