Groups and be selectively inherited by user accounts and contacts in One Identity Manager. The groups and user accounts (contacts) are divided into categories in the process. The categories can be freely selected and are specified by a template. Each category is given a specific position within the template. The formatting rule contains tables which map the user accounts (contact) and the groups. Specify your categories for user account (contacts) in the table for user accounts (contacts). Enter your categories fro groups in the group table. Each table contains the category items "Position1" to "Position31".
To define a category
The information about the forest is required in One Identity Manager to map trusted domains and group memberships across domains.
The information about the Active Directory forest is loaded into One Identity Manager during synchronization.
To display information about a forest
To enter the parent domain
Implicit trusts are created automatically.
To test trusted domains
This shows domains which trust the selected domain.
Set up global account policies for a domain. This information is declared in the domain as default settings. You may define several account policies for domains with the function level "Windows Server 2008 R2" or higher. This allows individual users and groups to be subjected to stricter account policies as intended for global groups. Refer to your Active Directory documentation for more information about the concept of fine-grained password policies under Windows Server.
You can also define password policies in the One Identity Manager that you can apply to the user account passwords.
|NOTE: The password policies, global account policy settings for the Active Directory domain and Active Directory account policies are taken into account when verifying user passwords.|