Important Announcement: Community Back to Full Functionality
Dear Members, we are thrilled to announce that our Community is back to full functionality and that posts publication is now enabled again! We appreciate your patience during the last weeks. Learn more about our Community Guidelines. Thank you, Schneider Electric Community Team.
EcoStruxure IT forum
Schneider Electric support forum about installation, configuration for Data Center Operation, Data Center Expert, EcoStruxure IT, NetBotz, DCIM, IT Advisor.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 07:32 PM
This question was originally posted on DCIM Support by Javier Zurera on 2018-06-27
Hi,
we have imported users from an active directory group. We see the users in DCO with the rights that the user group has defined in DCO.
But we have been testing what happen if we eliminate some user from the AD group, and we see that the user still belongs to the same user group in DCO. Also if we add a new user in the AD group, we do not see the new user in DCO. We have tried to reboot DCO server and the users in DCO do not change.
Do we have to wait more time to the synchronization between DCO and AD?
Regards
(CID:132657600)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 07:33 PM
This answer was originally posted on DCIM Support by Jef Faridi on 2018-06-28
Hi Javier,
When integrated with an authentication sever (such as AD server) the user and group authentication would be synchronized in DCO within/latest one hour time. Synchronization is running in background all the time.
In case a new user added in AD server as the group member, then the user would be in the corresponding group in DCO within the above mentioned synchronization time, and/or if this new user logs in (to DCO).
In case a remote (from DCO point of view) user being removed from the AD server, then the user will not be able to login to DCO. And due to KPIs, by design this user will not be removed from DCO automatically, but you (with admin rights) have the option to manually remove/delete this user if/when you wish.
Kind regards
(CID:132657950)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 07:33 PM
This comment was originally posted on DCIM Support by Javier Zurera on 2018-07-02
Hi Jeff,
But, what happens if a remote user is still in the AD but changes to another group?
Regards
(CID:132659027)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 07:33 PM
This comment was originally posted on DCIM Support by Jef Faridi on 2018-07-02
Hi Javier,
If the group is undefined in DCO, then the user may be able to login without having access to anything.
Kind regards
(CID:132659050)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-04 07:33 PM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the forum - and gain access to more than 10,000+ support articles along with insights from experts and peers.