Thycotic Community - Secret Server - Active Directory Sync - Messages

Message from Tucker

Fri, 23 Apr 2010 06:10:35 GMT

Hello Joanne,

The synchronization group is an Active Directory group that contains the users that will be accessing Secret Server. If you enable synchronization then only the users in the synchronization group(s) will be enabled in Secret Server. If you will be adding or converting domain users manually and would not like to use group synchronization, then disable synchronization from the AD Admin page. More detailed information can be found in the Active Directory section in the Secret Server User Guide. http://updates.thycotic.net/link.ashx?SecretServerUserGuide

Message from Joanne D

Thu, 22 Apr 2010 07:30:44 GMT

What is the synchonization group? How does that work? I do not have that setup so the user is getting disabled when I click the migrate AD.

Message from Tucker

Wed, 21 Apr 2010 12:08:07 GMT

Hello Joanne,

The local user is converted to the chosen Active Directory account. The user's username will now be the specific AD account's username and that user will need to login using the domain account credentials (ensure the domain is selected in the dropdownlist). The migration process will perserve the existing permissions, groups, and roles that were set on the user. The newly named user would appear on the Users page; you may need to select view inactive users checkbox if the AD user is not in a synchronization group and was disabled.

Message from Joanne D

Wed, 21 Apr 2010 11:48:59 GMT

Why is it when I click on the Migrate to AD button and select a user it deletes it in Secret Server?