立即与支持人员聊天
与支持团队交流

Quick Connect for Active Directory 6.1 - Administration Guide

One Identity Quick Connect Overview Deploying One Identity Quick Connect Sync Engine Getting started Connections to external data systems Synchronizing identity data Mapping objects Automated password synchronization Synchronization history Scenarios of use Appendices

Step 1: Create and link a Group Policy object

Create a new Group Policy object. Link the object to each organizational unit holding the domain controllers on which the Capture Agent is installed. For more information, see the documentation for your version of the Windows operating system.

Step 2: Add administrative template to Group Policy object

  1. Use Group Policy Object Editor to connect to the Group Policy object you created in step 1.
  2. In the Group Policy Object Editor console, expand the Group Policy object, and then do one of the following:
    • In Windows Server 2012 or 2012 R2, expand the Computer Configuration node, and then select Administrative Templates.
    • In a later version of Windows Server, expand Computer Configuration, expand Policies, and then select Administrative Templates.
  3. On the Action menu, point to All Tasks, and click Add/Remove Templates.

    The Add/Remove Templates dialog box opens.

  4. In the Add/Remove Templates dialog box, click Add, and then use the Policy Templates dialog box to open the Administrative Template (CaptureAgentService.adm file) supplied with the One Identity Quick Connect Sync Engine.

    The CaptureAgentService.adm file is located in <One Identity Quick Connect Sync Engine installation folder>\Quick Connect Capture Agent\Administrative Templates.

Step 3: Use Group Policy object to modify Capture Agent settings

  1. In Windows Server 2012 or 2012 R2, under Computer Configuration\Administrative Templates\Quick Connect, select Quick Connect Capture Agent Service.

    In a later version of Windows Server, under Computer Configuration\Policies\Administrative Templates\Classic Administrative Templates (ADM)\Quick Connect, select Quick Connect Capture Agent Service.

  2. In the details pane, configure the appropriate Group Policy settings.

    The names of Group Policy settings correspond to the names of the Capture Agent parameters provided in the table in Configuring Capture Agent.

  3. Run the following command at a command prompt for the changes to take effect:

    gpupdate /force

Configuring Quick Connect Service

You can modify the default values of the Quick Connect Service parameters related to password synchronization. These parameters and their default values are described in the next table.

 

Table 13: Quick Connect Service parameters

Parameter

Description

Default Value

Set interval between attempts to reset password

The Capture Agent sends information on changes made to Active Directory user passwords to the Quick Connect Service. After receiving this information, the Quick Connect Service tries to reset passwords in the target connected systems you specified.

This parameter determines the time interval (in minutes) between attempts to reset passwords in the target connected systems.

10 minutes

Set service connection point update period

The Quick Connect Service publishes its connection point in Active Directory.

This parameter determines the frequency of updates (in minutes) of the Quick Connect Service connection point.

60 minutes

Set certificate

This parameter specifies the thumbprint of the certificate used to encrypt the password sync traffic between Capture Agent and Quick Connect Service. The same certificate must be used for the Capture Agent and the Quick Connect Service.

By default, a built-in certificate is used.

You can modify the Quick Connect Service parameters using Group Policy and the Administrative Template supplied with the One Identity Quick Connect Sync Engine.

To modify the Quick Connect Service parameters using Group Policy

  1. On the computer running the Quick Connect Service, start Group Policy Object Editor, and then connect to the Local Computer Policy Group Policy object.
  2. In the Group Policy Object Editor console, expand the Local Computer Policy node, expand the Computer Configuration node, and select Administrative Templates.
  3. On the Action menu, point to All Tasks, and click Add/Remove Templates.
  4. In the Add/Remove Templates dialog box, click Add, and then use the Policy Templates dialog box to open the PasswordService.adm file that holds the Administrative Template.

    By default, the PasswordService.adm file is stored in <Quick Connect installation folder>\Quick Connect Capture Agent\Administrative Templates

  5. Under Computer Configuration\Administrative Templates\Quick Connect, select Quick Connect Password Service, and then in the details pane, configure the appropriate group policy settings.

    The names of group policy settings correspond to the names of the Quick Connect Service parameters provided in the table in Configuring Capture Agent.

  6. For the changes to take effect, refresh the Group Policy settings by running the following command at a command prompt: gpupdate /force
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级