How to specify Domain Controllers for Active Directory in SPP
说明
By default, Safeguard for Privileged Passwords automatically find domain controllers from a DNS and CLDAP ping but instead you can also specify the Domain Controllers manually so that SPP will only use the DCs specified.
This option to specify domain controllers can be done in two places, the Active Directory Asset and the Active Directory Provider in the Identity and Authentication settings.
解决办法
To specify a domain controller for Active Directory connections:
1.Go to Asset Management > Assets > edit the Active Directory Asset > Connection tab > Click edit icon > add the DCs in the Domain Controllers field.
2. Go to Appliance Management > Safeguard Access > identity and authentication > Edit the Active Directory provider > Click Advanced> add the DCs in the Domain Controllers field.
Note: You may enter the network addresses, which can be either DNS names or IP addresses, separated by spaces, commas, or semicolons. If you have multi-domains in a forest, you must provide a domain controller for every domain that SPP will connect to if required, otherwise, connections to domains with no DCs listed will fail. - For Identity and authentication, you can uncheck the domains that will not be used to login to SPP and in this case you would not need to specify DCs for these unused domains.