Active Directory Tab

Active Directory (AD) is a directory service implemented by Microsoft for Windows domain networks. Through this service, a domain controller authenticates users and groups in a Windows domain network, providing CloudAdvisor access to those users or groups. When configuring AD, keep the following in mind:

The AD domain and AD account you use must have the privileges to enable CloudAdvisor to add a computer to Active Directory. An account in the AD Domain Admins group should satisfy this requirement.
To join an AD domain, your CloudAdvisor host name must be 15 characters or fewer.
The CloudAdvisor Service Account must have the privilege to issue the Disable AD User action for configured Insight Policies in the Insight Management tab.
To set up the Service Account, the Active Directory host must have Windows Remote Management (WinRM) and PowerShell 4.0 or later installed.

You can optionally specify an administrator group, super user group or an audit user group that can log into CloudAdvisor with their AD credentials. These groups are defined in AD. For more information, see User Roles.

For more information about user roles, see User Roles.

Tab Information

Field Name	Description
Enabled slider	If this is set to ON, CloudAdvisor will use this AD configuration.
AD Domain Name	The AD domain name. You can only specify one AD domain.
NetBIOS Domain Name	This field automatically populates when you enter an AD domain. You should only change it if your AD uses a different configuration.
Super User Access Group	The AD group that will be given super user access in CloudAdvisor. Super Users have full administrative privileges in CloudAdvisor. Super Users can access any part of CloudAdvisor, can perform any task, and can access any file. For more information, see User Roles.
Administrator Access Group	The AD group that will be given administration access in CloudAdvisor. Administrators can perform CloudAdvisor administrative services such as adding and removing VMs and creating DiscoveryPoints on existing VMs. An administrator can perform operations on those files to which he or she has access.
Audit User Access Group.	The AD group that will be given audit user access in CloudAdvisor. Audit users can perform a very limited set of actions in CloudAdvisor. Audit Users can manage Insight Profiles and Insight Policies. They cannot add or remove VMs, create DiscoveryPoints, or change any search tags. In addition, Audit Users can only perform file operations (view file details, download, or restore) on files to which they have read access.
Service Account	Enter the AD account name that CloudAdvisor should use when contacting the AD. This account must be able to join the AD, and it must have permission to use WIndows Remote Management (WinRM). This AD account is normally in the AD Domain Admins Group.
Password	The password for the service account.
Test button	Click this button to verify the connection with the AD server using the specified service account login information.

HyTrust CloudAdvisor 2.2