Microsoft Active Directory is a directory service for Windows domains to enable network authentication and authorization.
Integrating with a Directory Service like Microsoft Active Directory will provide visibility and device presence awareness for an environment.
This integration pulls computer objects and associated information from Active Directory using the LDAP protocol.
If you haven't already, please review our instructions for configuring the Microsoft Active Directory integration before proceeding with the instructions below.
|Domain||Domain name to include the appropriate suffixes (.com or .local)|
|Root Domain||Root domain name to include the appropriate suffixes (.com or .local)|
|Excluded Domains||A comma separated list of domains to exclude from pulling|
You'll be asked to provide source credentials that Sevco will use to connect to Microsoft Active Directory
The following link will step you through creating an account. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/create-an-active-directory-server#add-users-and-computers-to-the-active-directory-domain
The username supplied should be a standard domain user (service account) with read-only access to all computers and users in the domain.
- Requires LDAP query permissions (enabled by default in MS AD)
- Interactive login is not required
- If additional restrictions are applied to a standard user/service account then please ensure it has the following permissions:
- List content
- Read all properties
- Read permissions
If you're having problems integrating a source, or if you've found something wrong in this document, please email us at [email protected] or suggest edits directly by selecting the
Suggest Edits located in the upper right hand corner of the documentation.
Updated about 1 month ago