Active Directory Scanner
R81 Harmony Endpoint Server Administration Guide|96
n
Computers deleted from the Active Directory that do not have Endpoint Security are
deleted from Users and Computers.
n
Computers deleted from the Active Directory that do have Endpoint Security move to the
Deleted Users/Computers folder because they might require recovery. You can delete
these computers manually from the Management Console.
n
Objects updated in the Active Directory are also updated on the server.
n
Unchanged records stay unchanged.
Troubleshooting the Directory Scanner
Issue Solution
The account of the Directory Scanner
instance does not have the required
read permissions to the Active
Directory or to the deleted objects
container.
Supply the required permissions.
A corrupted object exists in the Active
Directory.
Remove the object or deny the account used by
the Directory Scanner read permission to that
object. If the corrupt object is a container object,
permission is denied for all objects in the
container.
SSL Troubleshooting
If you use an SSL connection for the Directory Scanner communication, you might see a
message that is related to SSL configuration. Find the problem and solution here.
# Issue Solution
1 Stronger
authentication is
required
Try to connect with SSL with these steps:
1. Get an SSL certificate from your Domain Controller.
2. Import the SSL certificate to the Endpoint Security
Management Server. See sk84620.
3. Make sure that SSL Enabled is selected for this
Directory Scanner instance.
2 Wrong SSL Port Change the SSL port or disable SSL. You can do this in the
configuration.
3 Cannot connect to
the domain controller
Make sure that an LDAP server is running on the LDAP path
of the configured domain controller.
To Next Page
Loading...
