Active Directory Manager service configuration

The Active Directory Manager executes all of the business rules within each Active Directory Manager profile via the use of a Windows Service.  Before the Active Directory Manager service can be started, it needs to be configured correctly.  Use the "Active Directory Manager Service Setup" screen to specify these settings.

This screen can be accessed via the Desktop Edition > Modules > Active Directory Service Setup menu, or directly through the Active Directory Manager via the Open > Active Directory Service Setup menu

Select machine

This is the name of the machine where the Active Directory Manager service executable will run from.  It is necessary for the Active Directory Manager service executable file to be installed on the machine you select.  The drop-down box is populated with the names of all the machines on your network.  If you select a remote machine from this list (ie. a machine that is not the one you are working on), you will require sufficient network security permissions to browse to, and remotely administer the service.

Service Name

This is the name of the Active Directory Manager service as displayed in the list of available Windows Services.  Click on the button Windows Services Viewer to display all of the services installed on the selected machine.  This name here is provided for identification purposes only.

Display Name

This is the name of the Active Directory Manager service as displayed in the list of available Windows Services.  Click on the button Windows Services Viewer to display all of the services installed on the selected machine.  This name here is provided for identification purposes only.

Service Path

This is the path where the Active Directory Manager service is installed.  Click on the button Windows Services Viewer to display all of the services installed on the selected machine.  This name here is provided for identification purposes only.

Database

This setting refers to the HelpMaster database that the service will work against.  The database connection is set whenever you log into HelpMaster.

Display/User name

The Active Directory Manager service needs a Windows account to run as.  This account should have sufficient network security permission to to the following

  1. Access the HelpMaster SQL Sever database.  Requires both read and write privileges
  2. Access the HelpMaster Working Folders.  Requires read privileges
  3. Access the Windows .net framework system files
  4. If any of your HelpMaster Active Directory profiles have the "Delete clients" checkbox checked (ie. you want to delete clients), you will need to use a Windows account that has domain administration privileges in order to query Active Directory "Tombstone" objects.  See Deleting existing HelpMaster clients for further details about this.

After you have set the Service account user name, click on the Set User button to perform a system check of the security credentials required.  If the user account that was specified passes all of these tests, it will be set as the service account, and the service should start and work as expected.

If the security test fails, you will need to do one of the following

  1. Use another account that has more network security privileges
  2. Modify the existing account so that it does have increased security privileges in the area that the test failed for.

Password

This is the password for the service account.  Remember that network passwords can expire, which will affect the performance of a running service.

Startup Type

The startup type indicates the startup behaviour of the Email Manager service, as per the standard Windows Service startup types.

Status

The status indicates the current working status of the Email Manager service.  Click on the refresh button to get the latest status.  Use the Start / Stop button to control the service.

Timer interval

The Active Directory Manager service will execute each of the enabled Email Manger profiles in their specified order at regular time intervals based on the value specified in this box.

User Authentication Test

To determine whether the Domain/User Name entered has the necessary permissions and system access, use the Set User function. The resulting screen will alert you of any areas that do not have the required access. To test the Domain/User Name, click Set User.
  

Diagnostic Logging

This is found under the Event Logging Options tab. When this check box is checked, the Active Directory Manager will write a comprehensive event log for every action that it performs.  This may be useful for diagnosing configuration problems, or simply for testing and viewing what the Active Directory Manager is doing.  Due to the fact that verbose logging can very quickly fill your event log with much information, this feature will automatically turn itself off after 5 intervals the service runs - (see the Timer Interval setting above).  To turn it on again, simply check the box again.