Synchronizing Domain (Active Directory) Users and Groups

With the optional Microsoft Active Directory Toolkit, FileHold can synchronize domain users and groups that reside in Active Directory with the FileHold users. The benefits of synchronization of user / group objects with Active Directory include: centralized control of system users, single sign on authentication support, and the ability to quickly rollout new users to FileHold from Active Directory.

Active Directory Synchronized Users are called FileHold Domain Users within the FileHold system. Groups synchronized with Active Directory are called FileHold Domain Groups. The users and groups behave the same way as locally managed users when interacting FileHold. The difference is that the properties (contact information, passwords etc.) associated with domain user/groups are managed externally in Active Directory and not in FileHold.

Domain groups can be assigned to FileHold Groups that can in turn be given access (membership) to specific content located throughout the Library. Synchronization of a domain group will allow a new user added to the domain group at the Active Directory level to be automatically provisioned to all areas of FileHold based on the pre-defined permissions of their FileHold groups.

NOTE: It is important to keep in mind that some Active Directory deployments can be complex as they employ custom schemas and objects that may not be industry standard and can require additional effort to synchronize.

If you did not purchase the Active Directory option, you will need to create locally managed users. You will not be able to synchronize FileHold with Active Directory. To purchase the Active Directory Toolkit, contact sales@filehold.com. This toolkit includes additional support resources to ensure a successful synchronization.

Adding a Domain User / Group to FileHold

Complete the following steps to add a domain-managed (Active Directory) user account to FileHold.

WARNING: You must ensure that FileHold has been successfully synchronized with Microsoft Active Directory prior to completing these steps. Please contact support@filehold.com to start the process of domain synchronization.

To add a domain user or group to FileHold

  1. Log in to the System Admin section of FileHold and select User and Group Management > Users and click Add User(s).

  2. Select Add a user(s) or group(s) from a domain/directory server and select the domain name from the list.

  3. Click Next.

  4. Select the check boxes for the users or groups you want to add and click Add.

  5. To search for a domain user or group in the list, enter the name in the search field and click Search.

Domain User Synchronization

  1. In the Add Domain Group Options, select one of the following and click OK:

  • Add the group and the group members. Keep both synchronized with the domain.

  • Add just the group members and do not add the group. Only the user accounts will still be synchronized with the domain.

  1. At the Add User(s) and Group(s) Confirmation, click OK.

  2. Continue to add more users and groups to FileHold.

  3. To return to the user list, click Back to the User List.

 

See also:

User and Group Security Overview

Setting up Users and Groups

Creating Locally Managed Users

Creating FileHold Groups

User Roles

Adding Users to Groups

Viewing User and Group Properties

Searching for Users

Deleting Users and Groups

Guaranteed User Access

Reset User Password

Setting a Viewer License

Enabling and Disabling Accounts