Editing an Active Directory sync profile

Article:HOWTO82201  |  Created: 2012-11-05  |  Updated: 2013-04-18  |  Article URL http://www.symantec.com/docs/HOWTO82201
Article Type
How To


Subject


Editing an Active Directory sync profile

After you add your Active Directory sync profiles, you can edit the settings for any sync profile. In ServiceDesk, you can change the sync profile settings to target a different organizational unit or group on the Active Directory server. You can map a different Active Directory field to a Process Manager field.

See Managing Active Directory sync profiles.

To edit an Active Directory sync profile

  1. In the Process Manager portal, click Admin > Active Directory > Sync Profiles.

  2. On the Active Directory Sync Profiles page, at the far right of the specific sync profile name, click the Actions symbol (orange lightning), and click Edit AD Sync Profile.

  3. In the Edit Active Directory Sync Profiles dialog box, you can edit the following information:

    AD Sync Profile Name

    Lets you specify a name for the sync profile.

    Select Connection

    Lets you choose which Active Directory server connection you want the sync profile to target.

    AD Server Email Domain

    Lets you specify an email address for the users that you obtain from Active Directory. Use the following format:

    <domain.com >

    ServiceDesk requires that all users have an email address, but Active Directory does not. This domain is appended to the user name of any user who does not have an email address.

    Auto Create User On Initial Login

    Lets you have a ServiceDesk user account created automatically when a new user logs on.

    A new user who logs on to ServiceDesk is authenticated against the Process Manager database. If the user does not have an account there, and this check box is checked, the user is authenticated against Active Directory. If the user has an Active Directory account, a mirror account is created in the Process Manager database.

    AD Users Default Groups

    Lets you select the group to which users are added when their accounts are created automatically.

    The All Users group is the most typical selection.

    This option is available when you check Auto Create User on Initial Login.

  4. When you are finished, click Next.

    Note that if you do not enter the critical information or a connection cannot be made, a warning is displayed and you cannot proceed.

  5. In the Edit Active Directory Sync Profile dialog box under Synchronization Option, you can select a different target for the synchronization. If the target of your synchronizations has changed, select one the following options:

    Entire Domain

    Synchronizes ServiceDesk with your entire Active Directory.

    Organization units

    Synchronizes ServiceDesk with one or more Active Directory organizational units, which you select from the tree view that appears in this dialog box. The tree view displays the organization units that are defined in the specified Active Directory.

    Groups

    Synchronizes ServiceDesk with one or more Active Directory groups, which you select from the tree view that appears in this dialog box. The tree view displays the groups that are defined in the specified Active Directory.

    Specify LDAP Queries

    Synchronizes ServiceDesk to a specific LDAP Query.

  6. When you are finished, click Next.

  7. In the Edit Active Directory Field Mapping dialog box, you can edit which fields in Active Directory you want to map to which fields in Process Manager.

    Note that normally you do not need to change any field mapping settings. Symantec recommends that you do not change key fields mapping, such as Primary Email Id (Email address), first names, and last names.

  8. When you are finished, select one of the following options:

    Save

    If you do not want to edit the sync profile schedules, click Save. The dialog box closes, your changes are saved, and you are finished.

    Next

    If you want to edit the sync profile schedules, click Next. Go to step 9.

    Note that editing a sync profile schedule means selecting or adding a different schedule. If you want to edit the sync profile schedule, you must edit it from the Active Directory Sync Profiles Schedule page.

    See Editing an Active Directory sync profile schedule.

  9. In the Edit Schedule for Active Directory Server dialog box, you can select a different schedule in the drop-down lists for Schedule For Full Sync Profile and Schedule For Update Sync Profile.

    Note that if the proper schedule does not appear in the drop-down lists for Schedule For Full Sync Profile or Schedule For Update Sync Profile, you must add a schedule.

    To add schedule, click Add Schedule, add your schedules, and click Save. When you are done, the added schedule appears in the drop-down lists.

    See Adding Active Directory sync profile schedules.

  10. When you are finished, click Finish.


Legacy ID



v72070008_v81470773


Article URL http://www.symantec.com/docs/HOWTO82201


Terms of use for this information are found in Legal Notices