Question regarding the Active Directory / LDAP Service configuration in UMS. Does the user name in the configuration need to be a domain admin? Unfortunately I am using my own admin account which is a major non best practice. I wanted to use like a service account or something. Anyone have any ideas?
No, a normal Service Account with AD Read rights is sufficient!
I did it with a normal domain member (nogroups) works just fine. Just give it a proper mean PW ;)
ABSOLUTELY NOT!!! That is one of the things I harp about when I do AD Health Checks/Assessments. NO service account should have DA rights. To do LDAP Queries, all you need is an account that is a member of Domain Users and has a very secure password.
Agreed. This is just what I did. Thank you all for replies. The community is so awesome.
Continue reading and comment on the thread ‘What rights does the IGEL UMS Active Directory / LDAP Service require?’. Not a member? Join Here!
Learn more, search the IGEL Knowledge Base
Ask a question or comment on the above message thread?
Join or log in to the IGEL Community to ask us anything and meet other IGEL customers, partners, and EUC enthusiasts.Submit a question, or Join Today!