Active Directory is a directory service for systems of the Windows family - Windows Server 2012, Windows Server 2008, Windows Server 2003 and Windows 2000, which is an implementation of the standard protocols and directory names - LDAP. Server with installed and active Active Directory is promoted to a domain controller for a specified domain. The Xopero QNAP Appliance enables integration with Active Directory. The configuration of integration with AD is not required for proper work of the Xopero system.
What is the integration of Xopero with AD?
Active Directory integration is based on mapping the structure of all users who are active in the domain. With the Active Directory User Mapping option, the administrator has the ability to easily set up Xopero accounts from a single location. Integration requires Xopero Active Directory Agent to be installed. The mapped account in Xopero reflects the user's domain account, so the user does not need to authenticate with additional data.
By default, client application always connects to the same server that the administrator connects using the Management Center. If the server address has changed, the administrator will log in to this server, and the end users will also do so at the next logon to the system.
Active Directory users mapping
To assign permissions to Active Directory users run Xopero Management Center on the domain controller. Then click on Active Directory users mapping button marked on a screenshot below.
Active Directory - Users settings window will appear, it contains a list of available domain controller users. At this moment you need to define, to which group the user(whose account will be performed backup) will be assigned.
Available groups are Endpoint and additionally, depends on bought license version - Server. Endpoint group enables members of it local data and mailbox from MS Outlook. While Server expands those possibilities for advanced copies.
Xopero Active Directory Agent
Active Directory Agent application is designed for installation on domain controller users accounts. This is the version of Agent dedicated to working in an Active Directory environment, it works only in the active user session Active Directory. It's not required to use AD Agent, because the regular Xopero Agent can also work in the AD environment, but the disadvantage of this solution is that the mapping in this case does not work.
The Active Directory Agent has several differences compared to a regular Xopero Agent. The most significant of these are the following:
- Auto-complete authentication data (user, which is currently logged into system)
- Every host in Xopero is listed as SYSTEM,
so you can switch between devices without changing the host in the application.
- HDD Image, VHD / SS projects require administrator privileges for proper creation.
Creating HDD Image, VHD/SystemState projects
An AD user who does not have the appropriate Administrator privileges and tries to create one of the projects: HDD Image, VHD / SystemState will receive a disk loading error. To execute one of these projects, run the application as Administrator (which should also be a mapped user in Xopero) and then enter the user data that has the appropriate permissions.