Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Management Console - AD sync

Hi,

I am new to Safeguard easy and have a quick question. When viewing the user list in the Management Console it displays a list that was sync'd from active directory.

Question: In the event that user information on a particular AD account changes how can this be replicated to the Sophos management console?

The example is that a Service Agent here recently went temp to hire but cannot take ownership of machine via the management console because his referenced AD entry in the management console is using his old temp ID but his login to the local machine is referencing his updated domain account/ID.

Please Assist

~Adam

:1144


This thread was automatically locked due to age.
  • I figured it out. You select the top tree in the management console and select the synchronize tab. This still didnt work. This was because the user account that was configured in the LDAP settings was expired. 

    :1155

  • AHeil wrote:

    I figured it out. You select the top tree in the management console and select the synchronize tab. This still didnt work. This was because the user account that was configured in the LDAP settings was expired. 


    Hi AHeil,

    Thanks for visiting the forum and posting a question. Another way you can make a change to the Directory sync is to

    1. click on the Tools options from the menu

    2. click on the Options submenu

    3. click on the Directory tab

    4. make your changes.

    My advice to anyone doing Directory synchronization is to use a service account that has Read, List and Read child objects. Admin access is *not* needed.

    :1156