Question regarding the Active Directory / LDAP Service configuration in UMS. Does the user name in the configuration need to be a domain admin? Unfortunately I am using my own admin account which is a major non best practice. I wanted to use like a service account or something. Anyone have any ideas?
No, a normal Service Account with AD Read rights is sufficient!
I did it with a normal domain member (nogroups) works just fine. Just give it a proper mean PW 😉
ABSOLUTELY NOT!!! That is one of the things I harp about when I do AD Health Checks/Assessments. NO service account should have DA rights. To do LDAP Queries, all you need is an account that is a member of Domain Users and has a very secure password.
Agreed. This is just what I did. Thank you all for replies. The community is so awesome.
Continue reading and comment on the thread ‘What rights does the IGEL UMS Active Directory / LDAP Service require?’. Not a member? Join Here!
Learn more, search the IGEL Knowledge Base
Ask a question or comment on the above messasge thread?
Join or log in to the IGEL Community to ask us anything and meet other IGEL customers, partners, and EUC enthusiasts.Submit a question, or Join Today!
Popular Message Threads
- USB webcams in combination with RDP on IGEL OS?
- How to Install IGEL OS via a Bootable USB Drive
- After upgrading to IGEL OS 11.04.200.01 my Citrix Storefront configuration does not work anymore – Error adding store: AM_ERROR_AUTH_NETWORK_ERROR[65275]
- Citrix session crashes with black screen, any advice and how do I find logging?
- Any plans to support Teams Optimization Pack for VMware?
- IGEL OS on Raspberry Pi?
- IGEL UMS Universal Update Error: “could not resolve host name”