DescriptionExinda Active Directory (AD) Agent Release Notes
Release Date: May 7th, 2013
- Windows 7 SP1 (*)
- Windows Server 2003 SP2 (*)
- Windows Server 2008 SP2
- Windows Server 2008 R2
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2016
This windows installer was developed to support integration into Microsoft's Active Directory (AD) so reports and optimizing policies are based not only on the hosts IPs but also on the AD usernames and groups. To use this feature, Exinda's AD Windows Agent needs to be installed onto all Domain Controllers with AD capabilities or on Windows computers that belong to the same domain.
Note: This new version of Active Directory Agent allows the user to install the AD Agent into Windows PCs or Servers that are not Domain Controllers, the installation will require the user to enter the IP or hostname of the Domain Controller. (*) If installing the AD Agent on Windows Server 2003 SP2, the server must be a Domain Controller. This is the only version from the above that is not supported when the domain controller role is located in a different server. Similarly, the Windows 7 SP1 PC does not have server capabilities and cannot be promoted as a Domain Controller, hence the AD Client can be installed on a Windows 7 SP1 machine only to point to the Domain Controller.
How to Guide: Active Directory Integration
- If the user chooses to install the AD Agent on non-Domain Controller computers and they possess more than one Domain Controller in their network, they will be required to use one server per domain controller (An AD Agent installation can only be linked to one domain controller).
- The computer on which the AD Connector is installed must be in the same domain as the Active Directory Server it is querying.
- The computer must have .NET version 4 or higher
- If the installation process prompts with an alert that the user is untrusted (Expected when using Windows Server 2008 or above), the user can simply skip the alert and continue.
- The Exinda Appliance capitalizes the first letter in the user name by default when listing it. When entering user name into excluded list, the characters should NOT be capitalized. If user adds the username into the exclude list with the first letter being capitalized, the user id will not be ignored.
- In order to properly report and optimize based on usernames and groups, Exinda requires the Domain Controller to send the information related to what IP is mapped to what user at a specific point in time. The event logs related to this task are 4624 for Windows 2008 and above and 528/540 for Windows 2003 SP2. Please verify that these logs are being logged and if they are not follow Exinda recommendation in the below post: