What rights does the IGEL UMS Active Directory / LDAP Service require?


Question regarding the Active Directory / LDAP Service configuration in UMS. Does the user name in the configuration need to be a domain admin? Unfortunately I am using my own admin account which is a major non best practice. I wanted to use like a service account or something. Anyone have any ideas?


No, a normal Service Account with AD Read rights is sufficient!


I did it with a normal domain member (nogroups) works just fine. Just give it a proper mean PW 😉


ABSOLUTELY NOT!!! That is one of the things I harp about when I do AD Health Checks/Assessments. NO service account should have DA rights. To do LDAP Queries, all you need is an account that is a member of Domain Users and has a very secure password.


Agreed. This is just what I did. Thank you all for replies. The community is so awesome.

Continue reading and comment on the thread ‘What rights does the IGEL UMS Active Directory / LDAP Service require?’.  Not a member? Join Here!

Learn more, search the IGEL Knowledge Base



Ask a question or comment on the above messasge thread?

Join or log in to the IGEL Community to ask us anything and meet other IGEL customers, partners, and EUC enthusiasts.

Submit a question, or Join Today!


Popular Message Threads


Categories & Tags: