Restart active directory domain services

All AD groups, users, and computers that are part of this parent group will automatically be included. Users and computers belonging to these groups will be synchronized to Umbrella.ДЇor each sub-tree, only the parent group needs to be specified. Optionally, you can specify AD Groups of interest for the purpose of policy creation in Umbrella. If you need to periodically bring down your domain controller for maintenance or updates or your domain controllers are behind a load balancer that does not support LDAP queries, it is recommended to register the domain instead. Read-only Domain Controller (RODC) registrations are supported for retrieval of user and group identities. Ensure that the domain controller you are registering is not subject to any AD replication delays. If you register multiple domain controllers on the Umbrella dashboard, the Connector will only attempt to perform an LDAP sync against the first domain controller in the list. The Connector can only retrieve user and group identities from a single domain controller.

The Connector Server must be able to communicate with the domain controller over port 389/636 TCP for LDAP sync or LDAP over SSL. The Connector will perform an LDAP sync against this domain controller or domain to retrieve the user and group identities.

Register a Domain Controller or Domain in the Umbrella DashboardДЄctive Directory integration requires you to register an AD domain controller or AD domain in the Umbrella dashboard.

Restart active directory domain services