Skip to content
IAM built for the AI-Era
Logo

Secure Service Desk

The following settings can be configured from the Secure Service Desk section.

Administrative Security group

In this section, you can manage the users and groups authorized to access Specops Secure Service Desk as service desk agents.

Add or Remove Members

  1. Click Secure Service Desk.
  2. In the Administrative Security group section, click Edit members.
  3. To add a member, click Add member and enter the name of the user or group you want to add.
  4. To remove a member, highlight a member and click Remove selected member.
  5. When finished, click OK.

User Search Settings

Configure the following settings in the User Search Settings section. These settings control how service desk agents search for users before verifying their identity in Specops Secure Service Desk.

  • Search attributes: Specify the Active Directory attributes used to search for users in Specops Secure Service Desk. If not set, the default will be ambiguous name resolution (aNR), a consolidation of some common attributes on the user object. For more details about aNR, see Active Directory: Ambiguous Name Resolution. To use aNR and a custom attribute, you will need to include aNR in a comma-separated list of attributes to search.
  • Additional result attributes: Specify additional attributes in Active Directory to be shown when user details are displayed in the search results.
  • Custom result limit: Specify the maximum number of results retrieved when searching for users.
  • Include disabled users: Select to include disabled users in the search results when searching for users in Secure Service Desk.

Adding Search Attributes

Note

This is usually left at the default, aNR (ambiguous name resolution), which will find most users matching any search input.

  1. Click Secure Service Desk.
  2. In the User Search Settings section, click Edit in the Search attributes row.
  3. Clear Use default value.
  4. Enter the attributes you want to use, separated by commas.
  5. Click OK.

Changing Additional Result Attributes

  1. Click Secure Service Desk.
  2. In the User Search settings section, click Edit in the Additional result attributes row.
  3. Click Add attribute.
  4. Enter the Display name and Attribute name for the attribute you want to add.
  5. Click OK.

Changing Custom Result Limit

Note

This is usually left at the default, 200.

  1. Click Secure Service Desk.
  2. In the User Search settings section, click Edit in the Custom result limit row.
  3. Clear Use default value.
  4. Enter the value you would like to use.
  5. Click OK.

Manage Secure Service Desk GPOs

Here you can tag GPOs to enable them for Secure Service Desk. If any GPOs are tagged, only users associated with the tagged GPOs will be managed in Secure Service Desk.

Note

The license count for Secure Service Desk is based on the users covered by the tagged GPOs. If no GPOs are tagged, it is based on all users in the configured Active Directory scope.

Tagging GPOs

  1. Click Secure Service Desk.
  2. In the GPOs tagged for Secure Service Desk user management section, click Tag GPOs.
  3. Select the GPO you want to tag (Shift-click or CTRL-click to select multiple GPOs at once).
  4. Click OK.

To untag GPOs, click Untag in the table row of the GPO you want to remove.