Skip to content
IAM built for the AI-Era
Logo

Active Directory Settings

The following settings can be configured from the Active Directory Settings section.

Edit Active Directory Scopes

The Active Directory scope determines which users can use the Specops Authentication service.

  1. Click Active Directory Settings.
  2. Find Active Directory Scopes and click Edit.
  3. In the dialog that opens, select the desired Active Directory scope and click Add selected. Select multiple locations if you want multiple scopes of management.
  4. Click OK.

Enable Password Resets in Specops Authentication

You can enable the uReset and Secure Service Desk features in Specops Authentication.

  • For uReset, this enables end-users to address common tasks related to password management, including forgotten passwords. This feature is locked unless you have uReset as a part of your subscription.
  • For Secure Service Desk, this enables service desk agents to reset users’ passwords. This feature is locked unless you have Secure Service Desk as a part of your subscription.

To allow password resets:

  1. Click Active Directory Settings.
  2. Click Change in the Allow password resets row.
  3. In the dialog that opens, select one of the following options when enabling the password reset feature:
    • Standard Security Mode: All users that are members of the Specops Authentication Service Desk Agents group will be able to reset passwords for other users.
    • Delegated Security Mode: The access control for resetting passwords for other users is based on the actual security configuration (‘reset password’ permission) in Active Directory.
  4. Click OK.

Add or Remove Members of Security Groups

You can manage the members of the available security groups.

  • Users that are members of the Admin Group are portal administrators in Specops Authentication Web.
  • Users that are members of the User Administrator Group can access user management features in Specops Authentication Web.
  • Users that are members of the Gatekeepers group have permission to read user information.

To manage members:

  1. Click Active Directory Settings.
  2. In the desired Security groups section, find the security group you want to edit, and click Edit members.
  3. To add a member, click Add member and enter the name of the user or group you want to add.
  4. To remove a member, select a member and click Remove selected member.
  5. When finished, click OK.

Reporting Readers Group

Members of the Reporting Readers security group can log in to Specops Authentication Web to view reports. Unless they are also members of other security groups, they will not see any other sections in Specops Authentication Web.

Note

Members of this group can view all reports for the account. You cannot restrict which reports they can view.

Specify Preferred Domain Controller

By default, Specops Authentication uses the closest available domain controller. To change domain controller:

  1. Click Active Directory Settings.
  2. Click Change to select a preferred domain controller.