Integrating Active Directory with OfficeScan

  1. Go to Administration > Active Directory > Active Directory Integration.
  2. Under Active Directory Domains, specify the Active Directory domain name.
  3. Specify credentials that the OfficeScan server will use when synchronizing data with the specified Active Directory domain. The credentials are required if the server is not part of the domain. Otherwise, the credentials are optional. Be sure that these credentials do not expire or the server will not be able to synchronize data.
    1. Click Specify Domain Credentials.
    2. In the popup window that opens, type the username and password. The username can be specified using any of the following formats:
      • domain\username

      • username@domain

    3. Click Save.
  4. Click the () button to add more domains. If necessary, specify domain credentials for any of the added domains.
  5. Click the () button to delete domains.
  6. Specify encryption settings if you specified domain credentials. As a security measure, OfficeScan encrypts the domain credentials you specified before saving them to the database. When OfficeScan synchronizes data with any of the specified domains, it will use an encryption key to decrypt the domain credentials.
    1. Go to the Encryption Settings for Domain Credentials section.
    2. Type an encryption key that does not exceed 128 characters.
    3. Specify a file to which to save the encryption key. You can choose a popular file format, such as .txt. Type the file's full path and name, such as C:\AD_Encryption\EncryptionKey.txt.

    If the file is removed or the file path changes, OfficeScan will not be able to synchronize data with all of the specified domains.

  7. Click one of the following:
    • Save: Save the settings only. Because synchronizing data may strain network resources, you can choose to save the settings only and synchronize at a later time, such as during non-critical business hours.

    • Save and Synchronize: Save the settings and synchronize data with the Active Directory domains.

  8. Schedule periodic synchronizations. For details, see Synchronizing Data with Active Directory Domains.