Active Directory Integration - Revision history

Bmeyn at 15:30, 26 April 2021

2021-04-26T15:30:48Z

Ltalaschus at 09:51, 22 April 2021

2021-04-22T09:51:55Z

Bmeyn: /* User Database Synchronization */

2019-12-10T17:22:31Z

User Database Synchronization

Dweuthen: /* User Database Synchronization */

2019-12-04T17:14:19Z

User Database Synchronization

Dweuthen at 17:13, 4 December 2019

2019-12-04T17:13:52Z

Ltalaschus: /* User Database Synchronization */

2019-07-02T13:36:49Z

User Database Synchronization

Ltalaschus: /* User Database Synchronization */

2019-05-16T08:42:58Z

User Database Synchronization

Dweuthen: /* Accessing Directoy Service Integration */

2017-10-25T09:28:38Z

Accessing Directoy Service Integration

Ltalaschus at 10:30, 30 March 2017

2017-03-30T10:30:46Z

Bmeyn at 09:04, 28 March 2017

2017-03-28T09:04:49Z

@@ Line 40: / Line 40: @@
 {{Directory Services Login with Directory Services Credentials|Active Directory}}
-To use ''Windows-Authentication'' it is a requirement that the client and the MailStore Server computer are member of the same domain and that the client is authenticated at the domain controller.
+To use ''Single-Sign-On (SSO)'' with ''Windows-Authentication'', the client and the MailStore Server computer must be members of the same domain and the client must be authenticated at the domain controller. Also, additional configuration steps are necessary as described in the articles [[MailStore_Client_Deployment|MailStore Client Deployment]] and [[MailStore_Outlook_Add-in_Deployment|MailStore Outlook Add-in Deployment]].
 [[de:Active Directory-Integration]]
 [[en:Active Directory Integration]]

@@ Line 32: / Line 32: @@
 ** ''User Principal Name (UPN)''<br/>The Windows user name including domain, e.g. ''jane.doe@example.com''
 ** ''User Principal Name (UPN) Local Part''<br/>The Windows user name excluding domain, e.g. ''jane.doe''
 {{Directory Services Options|Active Directory}}
 {{Directory Services Assign Default Privileges|an Active Directory}}

@@ Line 24: / Line 24: @@
 *'''Synchronize Microsoft Exchange users only'''<br/>Only user accounts with email addresses configured in Active Directory will be taken into account by the synchronization. Clear this checkbox only if all Active Directory users should be created as MailStore Server users as well.
-**'''Synchronize users visible in address lists only'''<br/>Only Active Directory user accounts will be taken into account by the synchronization whose Exchange mailboxes are not hidden from Exchange address lists. This option is only evaluated, when the option ''Synchronize Microsoft Exchange users only'' is enabled.
+**'''Synchronize users visible in address lists only'''<br/>Only Active Directory user accounts will be taken into account by the synchronization whose Exchange mailboxes are not hidden from Exchange address lists. This option can only be enabled if the option ''Synchronize Microsoft Exchange users only'' is enabled, too.
 *'''Synchronize enabled users only'''<br/>Only user accounts enabled in Active Directory will be taken into account by the synchronization. Deactivating this option may be useful if certain Exchange mailboxes should be archived whose Active Directory user accounts are deactivated by default.
 *'''Sync only these groups'''<br/>Choose one or several Active Directory security groups if you only want their members to be created as MailStore users. That way it's possible to exclude certain Active Directory accounts from being synchronized to MailStore, e.g. system accounts.

@@ Line 24: / Line 24: @@
 *'''Synchronize Microsoft Exchange users only'''<br/>Only user accounts with email addresses configured in Active Directory will be taken into account by the synchronization. Clear this checkbox only if all Active Directory users should be created as MailStore Server users as well.
-*'''Synchronize users visible in address lists only'''<br/>Only Active Directory user accounts will be taken into account by the synchronization whose Exchange mailboxes are not hidden from Exchange address lists. This option is only evaluated, when the option ''Synchronize Microsoft Exchange users only'' is enabled.
+**'''Synchronize users visible in address lists only'''<br/>Only Active Directory user accounts will be taken into account by the synchronization whose Exchange mailboxes are not hidden from Exchange address lists. This option is only evaluated, when the option ''Synchronize Microsoft Exchange users only'' is enabled.
-**'''Synchronize enabled users only'''<br/>Only user accounts enabled in Active Directory will be taken into account by the synchronization. Deactivating this option may be useful if certain Exchange mailboxes should be archived whose Active Directory user accounts are deactivated by default.
+*'''Synchronize enabled users only'''<br/>Only user accounts enabled in Active Directory will be taken into account by the synchronization. Deactivating this option may be useful if certain Exchange mailboxes should be archived whose Active Directory user accounts are deactivated by default.
 *'''Sync only these groups'''<br/>Choose one or several Active Directory security groups if you only want their members to be created as MailStore users. That way it's possible to exclude certain Active Directory accounts from being synchronized to MailStore, e.g. system accounts.
 *: <div class="msnote">'''Note:''' When the MailStore Server Computer is member of a domain, that is not the domain where users are synchronized from, ''Universal Groups'' may not be selectable. An error with the errorcode 1355 might be shown then.</div>

@@ Line 24: / Line 24: @@
 *'''Synchronize Microsoft Exchange users only'''<br/>Only user accounts with email addresses configured in Active Directory will be taken into account by the synchronization. Clear this checkbox only if all Active Directory users should be created as MailStore Server users as well.
 *'''Synchronize users visible in address lists only'''<br/>Only Active Directory user accounts will be taken into account by the synchronization whose Exchange mailboxes are not hidden from Exchange address lists. This option is only evaluated, when the option ''Synchronize Microsoft Exchange users only'' is enabled.
 *'''Sync only these groups'''<br/>Choose one or several Active Directory security groups if you only want their members to be created as MailStore users. That way it's possible to exclude certain Active Directory accounts from being synchronized to MailStore, e.g. system accounts.
 *: <div class="msnote">'''Note:''' When the MailStore Server Computer is member of a domain, that is not the domain where users are synchronized from, ''Universal Groups'' may not be selectable. An error with the errorcode 1355 might be shown then.</div>

@@ Line 27: / Line 27: @@
 *'''Synchronize users visible in address lists only'''<br/>Only Active Directory user accounts will be taken into account by the synchronization whose Exchange mailboxes are not hidden from Exchange address lists.
 *'''Sync only these groups'''<br/>Choose one or several Active Directory security groups if you only want their members to be created as MailStore users. That way it's possible to exclude certain Active Directory accounts from being synchronized to MailStore, e.g. system accounts.
 * '''User Name Format'''<br/>Choose which naming scheme MailStore user names should follow:
 ** ''SAM Account Name''<br/>The Pre-Windows 2000 user name.

@@ Line 5: / Line 5: @@
 The MailStore Server service must run as 'Local System account' and the server must be a member of the domain if you want to use 'Integrated Windows authentication'.</p>
-== Accessing Directoy Service Integration ==
+== Accessing Directory Service Integration ==
 {{Directory Services Accessing Configuration|Active Directory|mads_sync_01.png}}

@@ Line 34: / Line 34: @@
 {{Directory Services Assign Default Privileges|an Active Directory}}
 {{Directory Services Run Synchronization|Active Directory}}
 [[File:Mads_sync_02.png|450px|center]]
-== MailStore Client Single Sign-On ==
+{{Directory Services Login with Directory Services Credentials|Active Directory}}
-For information on using the single sign-on functionality in Active Directory environments, please refer to the article [[MailStore_Client_Deployment|MailStore Client Deployment]].
+To use ''Windows-Authentication'' additional configuration steps are necessary which are described in the article [[MailStore_Client_Deployment|MailStore Client Deployment]].
 [[de:Active Directory-Integration]]
 [[en:Active Directory Integration]]