{"id":97082,"date":"2023-10-27T02:07:49","date_gmt":"2023-10-27T06:07:49","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=97082"},"modified":"2025-01-02T03:42:21","modified_gmt":"2025-01-02T08:42:21","slug":"configure-adi-sync-from-jumpcloud-to-ad","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad","title":{"rendered":"Configure ADI: Manage users, groups, and passwords in 探花大神"},"content":{"rendered":"\n<p>The 探花大神 Active Directory Integration (ADI) enables the syncing of users, groups, and passwords between 探花大神 and on-premise or off-premise AD. As covered in <a href=\"https:\/\/jumpcloud.com\/support\/get-started-adi\">Get Started with the Active Directory Integration<\/a>, the ADI uses two agents: an Import Agent and a Sync Agent that can be installed in three (3) configurations which are based on where you want to manage users, groups, and passwords.<\/p>\n\n\n\n<ol>\n<li>Manage users, groups, and passwords in AD.<\/li>\n\n\n\n<li>Manage users, groups, and passwords in 探花大神.<\/li>\n\n\n\n<li>Manage users and passwords in either system, or both.<\/li>\n<\/ol>\n\n\n\n<p>This article provides a step-by-step guide for configuring ADI to manage users, security groups, and passwords in 探花大神.&nbsp;This configuration supports organizations looking to have 探花大神 be their Identity Provider to minimize their AD footprint or migrate away from AD completely.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-deployment-configuration-overview\">Deployment Configuration Overview<\/h2>\n\n\n\n<ul>\n<li>Use ADI sync agent only<\/li>\n\n\n\n<li>Install agents on either domain controllers (DCs) or member servers<\/li>\n\n\n\n<li>Assign users and user groups to the AD instance in 探花大神<\/li>\n<\/ul>\n\n\n\n<p>To explore the use cases and benefits of this configuration see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/configure-the-active-directory-integration#manage-user,-groups,-passwords-in-jumpcloud\">Manage user, groups, passwords in 探花大神<\/a><strong>&nbsp;<\/strong>in the&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/configure-the-active-directory-integration\" target=\"_blank\" rel=\"noreferrer noopener\">Configure Active Directory Integration (ADI)<\/a>&nbsp;help center article.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-workflow-for-managing-users-groups-and-passwords-in-jumpcloud\"><strong>Workflows <\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-jumpcloud-sync-only-single-domain-workflow\"><strong>探花大神 Sync Only \u2013 Single Domain Workflow<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"729\" height=\"331\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100189\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg 729w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow-300x136.jpg 300w\" sizes=\"(max-width: 729px) 100vw, 729px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-jumpcloud-sync-only-multiple-domain-workflow\"><strong>探花大神 Sync Only \u2013 Multiple Domain Workflow<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"737\" height=\"610\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-multiple-domain-workflow.jpg\" alt=\"\" class=\"wp-image-100190\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-multiple-domain-workflow.jpg 737w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-multiple-domain-workflow-300x248.jpg 300w\" sizes=\"(max-width: 737px) 100vw, 737px\" \/><\/figure>\n\n\n\n<p>To learn more about the general user identity workflow and expected behavior for any user, group, and password change after the AD Sync agents have been configured, read&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/use-the-Active-Directory-Integration\" target=\"_blank\" rel=\"noreferrer noopener\">Use and Manage the Active Directory Integration (ADI)<\/a>&nbsp;.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-system-requirements\"><strong>System Requirements<\/strong><\/h2>\n\n\n\n<ul>\n<li>64-bit Windows Server (versions 2012, 2016, 2019, 2022)\n<ul>\n<li>Server Core installation is also supported for Windows Server versions 2016, 2019, and 2022. You will need to include the&nbsp;<strong>\/msiexec<\/strong>&nbsp;parameter when running the agent installer<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>15MB disk space<\/li>\n\n\n\n<li>10MB RAM<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-considerations\"><strong>Considerations<\/strong><\/h2>\n\n\n\n<ul>\n<li>We <strong>strongly<\/strong> recommend <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-to-use-ldaps\">installing and using LDAPS<\/a> for the ADI. Configuring and using LDAPS on the Domain Controller that the 探花大神 ADI agents will connect to secures any sensitive information that is exchanged between the 探花大神 agents and the Domain Controller and protects against malicious users.<\/li>\n\n\n\n<li>Connect Keys are one-time use keys required for installing the sync agent on a new AD server. They are not required when upgrading an existing installation.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The Connect Key will expire in 7 days if it is not used.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li>When updating an existing agent installation, only minimal installation screens are shown:\n<ul>\n<li>Directory for where the installation should occur<\/li>\n\n\n\n<li>Finish screen<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Demoting a DC installation to a member server and promoting a member server installation to a DC aren\u2019t supported. The agent(s) must be uninstalled first and then installed on the other type of server<\/li>\n\n\n\n<li>Non-standard ASCII characters are not supported in the Root User DN<\/li>\n\n\n\n<li>The AD Domain and Root User container DN needs to match the Domain and Root User container configured for AD Sync<\/li>\n\n\n\n<li>The 探花大神 AD sync agent services use TLS for all communication. If no network connectivity exists to 探花大神, the ADI won\u2019t work properly&nbsp;<\/li>\n\n\n\n<li>When multiple AD sync agents are installed, one is designated as the primary agent by the ADI service. All create and change requests are sent to that agent. If that agent becomes unavailable, another active sync agent is automatically designated as the primary<\/li>\n\n\n\n<li>Password complexity requirements in AD and 探花大神 should be as closely aligned as possible to avoid passwords being rejected and failing to sync due to not meeting the complexity requirements<\/li>\n\n\n\n<li>The user attributes that sync are:\n<ul>\n<li>First Name<\/li>\n\n\n\n<li>Last Name<\/li>\n\n\n\n<li>Username<\/li>\n\n\n\n<li>Email<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Groups sync automatically from 探花大神 to AD when one or more sync agents are installed.&nbsp;This sync cannot be disabled<\/li>\n\n\n\n<li>The passwords for the server accounts used by the integration (e.g., <strong>jcimport<\/strong> and <strong>jcsync<\/strong>) should be rotated periodically for security reasons<\/li>\n\n\n\n<li>As of ADI sync agent version 4.x, the following changes were made:\n<ul>\n<li>The default location for all agent related installation, configuration, and log files is C:\\Program Files\\探花大神\\AD Integration\\<\/li>\n\n\n\n<li>The ADI sync agent can be installed independently of the ADI import agent<\/li>\n\n\n\n<li>The ADI sync agent connect key is encrypted and the value in the registry is replaced with the encrypted value when the agent starts<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Managing <a href=\"https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/22331.adminsdholder-protected-groups-and-security-descriptor-propagator.aspx\" target=\"_blank\" rel=\"noreferrer noopener\">privileged user accounts<\/a>, such as Domain Admins, in AD from 探花大神 isn\u2019t supported. \n<ul>\n<li>AD flags privileged accounts with \u201cadminCount=1\u201d in the directory, which results in any inherited permissions granted to the 探花大神 AD agent services to be removed. This prevents 探花大神 from being able to effectively manage those privileged accounts<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-installation-steps-overview\"><strong>Installation Steps Overview<\/strong><\/h2>\n\n\n\n<p>The main steps you will take to install and configure AD for this use case are:<\/p>\n\n\n\n<ol>\n<li>Complete the Prerequisite Checklist.<\/li>\n\n\n\n<li>Determine the Root User container in AD.<\/li>\n\n\n\n<li>Create the AD Sync Service Account.<\/li>\n\n\n\n<li>Delegate control for the AD Sync Service Account.<\/li>\n\n\n\n<li>Create an AD domain instance in 探花大神.<\/li>\n\n\n\n<li>Select your configuration and download the agent.<\/li>\n\n\n\n<li>[Optional] Perform a one-time import of users from AD to 探花大神.<\/li>\n\n\n\n<li>Run the AD Sync Agent Installation Wizard on AD servers.<\/li>\n\n\n\n<li>Verify AD sync.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prerequisite-checklist\"><strong>Prerequisite Checklist<\/strong><\/h2>\n\n\n\n<p>Before installing the ADI sync agent, we recommend completing each item in the following checklist before continuing:<\/p>\n\n\n\n<ol>\n<li>Know your AD Domain Admin credentials.<\/li>\n\n\n\n<li>Decide whether you want to install the sync agents on your AD domain\u2019s non-DC Domain Member Servers or Domain Controllers (DCs).\n<ul>\n<li>If installing on DCs, we recommend that you install the AD Sync agent on your Primary DC and any DC impacted by extended replication delays<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Verify you have access to <em>all<\/em> DCs or non-DC Domain Member Servers in the AD domain.<\/li>\n\n\n\n<li>Ensure your DCs or non-DC Domain Member Servers are running on a 探花大神 supported 64-bit Windows Server version (2012, 2016, 2019, 2022).<\/li>\n\n\n\n<li>Verify DCs or non-DC Domain Member Servers have networking access to the internet and are able to communicate outbound to console.jumpcoud.com over HTTPS port 443.&nbsp;<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/manage-admin-accounts#creating-jumpcloud-administrators\">Create a dedicated Administrator account<\/a> in 探花大神 that is specifically for the ADI.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>API tokens are specific to each Admin account. Create a separate account for this integration to prevent the possibility of breaking the ADI connectivity to your 探花大神 organization when an Admin account is deleted.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li>Verify all users to be synced from 探花大神 to AD have a value for first name and last name in 探花大神.<\/li>\n\n\n\n<li>Align password complexity requirements between AD and 探花大神 as closely as possible. Otherwise, passwords may not replicate if they\u2019re rejected by the destination directory\u2019s complexity requirements.<\/li>\n\n\n\n<li>[<strong>Strongly recommended<\/strong>] <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-to-use-ldaps\">Install LDAPS<\/a>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-prepare-for-installing-the-agent\"><strong>Prepare for Installing the Agent<\/strong><\/h2>\n\n\n\n<p>To export and update user attributes, passwords and security groups from 探花大神 to AD, you\u2019ll need to install a 探花大神 AD sync agent on your AD domain\u2019s non-DC Domain Member Servers (member servers) or Domain Controllers (DCs).&nbsp; Complete the steps below to prepare for installing the agents on your server(s).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-determine-the-root-user-container-in-ad\"><strong>Determine the Root User Container in AD<\/strong><\/h3>\n\n\n\n<p>You must specify the Root User Container during the 探花大神 AD sync agent installation. AD\u2019s default \u2018Users\u2019 container (CN=Users) is pre-populated in the AD Users and Computers (ADUC) interface and labeled as \u201cUsers\u201d as shown in the following image.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/support.jumpcloud.com\/servlet\/rtaImage?eid=ka06S000001Yuic&amp;feoid=00N1M00000F5H4z&amp;refid=0EM6S000003YywK\" alt=\"\" \/><\/figure>\n\n\n\n<p>If you want to use AD\u2019s default Root User container, the value you will need to enter during the AD sync agent installation is:<\/p>\n\n\n\n<ul>\n<li><kbd>CN=Users;DC=example;DC=com<\/kbd><\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Commas (,) are not supported. You must use semicolons (;).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>If AD\u2019s default Root User container (CN=Users) isn\u2019t the Root User Container you want to use for your AD integration, follow the steps below to get the distinguishedName value you will need to enter during the AD sync agent installation.&nbsp;<\/p>\n\n\n\n<ol>\n<li>Verify the full LDAP path for the chosen Root user container you have selected in ADUC:\n<ol style=\"list-style-type:lower-alpha\">\n<li>From the ADUC panel\u2019s View menu, enable Advanced Features.&nbsp;<\/li>\n\n\n\n<li>Right-click the container and select Properties.&nbsp;<\/li>\n\n\n\n<li>Select the Attribute Editor tab.&nbsp;<\/li>\n\n\n\n<li>Select the \u201cdistinguishedName\u201d attribute, then click View.<\/li>\n\n\n\n<li>Note the value.&nbsp; It will need to be entered during the AD sync agent installation.&nbsp;<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"774\" height=\"566\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/09\/enter-dc-in-string-attribute-1.jpg\" alt=\"\" class=\"wp-image-100205\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/enter-dc-in-string-attribute-1.jpg 774w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/enter-dc-in-string-attribute-1-300x219.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/enter-dc-in-string-attribute-1-768x562.jpg 768w\" sizes=\"(max-width: 774px) 100vw, 774px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-create-the-ad-sync-service-account-in-ad\"><strong>Create the AD Sync Service Account in AD<\/strong><\/h3>\n\n\n\n<p>After you identify the Root User Container (\u2018Root user DN\u2019)&nbsp; that you want to use with your 探花大神 AD integration, create a new AD-based service account (standard user account) that allows the 探花大神 AD sync agent to manage users and groups.<\/p>\n\n\n\n<ol>\n<li>Open the ADUC Menu.\n<ol style=\"list-style-type:lower-alpha\">\n<li>Click start button and type \u201cdsa\u201d and click the Active Directory Users and Computers icon.<\/li>\n\n\n\n<li>Right click on the container and click <strong>New &gt; User<\/strong>.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/active-directory-users-computers.jpeg\" alt=\"\" \/><\/figure><\/div>\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This user cannot:<\/p>\n\n\n\n<ul>\n<li>Be a Domain Administrator.<\/li>\n\n\n\n<li>Have the username of \u201c探花大神\u201d.<\/li>\n\n\n\n<li>Be a member of the 探花大神 security group.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"3\">\n<li> Enter the following values for the 探花大神 Import Service Account user:\n<ol style=\"list-style-type:lower-alpha\">\n<li>First Name &#8211;<kbd> JumpClou<\/kbd>d<\/li>\n\n\n\n<li>Last Name &#8211; <kbd>Sync<\/kbd><\/li>\n\n\n\n<li>User logon name &#8211; <kbd>jcsync<\/kbd><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Use <kbd>jcsync <\/kbd>to distinguish what this user is for and to which agent it is attached.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The user logon name cannot be \u201c探花大神\u201d.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"755\" height=\"655\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/09\/jcsync-user-window.jpg\" alt=\"\" class=\"wp-image-100218\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/jcsync-user-window.jpg 755w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/jcsync-user-window-300x260.jpg 300w\" sizes=\"(max-width: 755px) 100vw, 755px\" \/><\/figure>\n\n\n\n<ol start=\"4\">\n<li>Click <strong>Next<\/strong><\/li>\n\n\n\n<li>Enter a password for the jcsync user and ensure that it is set to Never Expire since this will be a service account for the Sync Agent.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This password should still be rotated periodically for security reasons.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"6\">\n<li>Click <strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-delegate-control-for-the-ad-sync-service-account-in-ad\"><strong>Delegate control for the AD Sync Service Account in AD<\/strong><\/h3>\n\n\n\n<ol>\n<li>Navigate to the Root User Container in ADUC that you have selected, right-click the container and select Delegate Control. This launches the Delegation of Control Wizard.<\/li>\n\n\n\n<li>Click <strong>Next<\/strong>.<\/li>\n\n\n\n<li>Add the newly created service account user to the Delegation of Control Wizard.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"805\" height=\"632\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_32188e3e.png\" alt=\"\" class=\"wp-image-111917\" style=\"width:662px;height:auto\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_32188e3e.png 805w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_32188e3e-300x236.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_32188e3e-768x603.png 768w\" sizes=\"(max-width: 805px) 100vw, 805px\" \/><\/figure>\n\n\n\n<ol start=\"4\">\n<li>Click <strong>Next<\/strong>, then select the following tasks:\n<ul>\n<li>Create, delete, and manage user accounts<\/li>\n\n\n\n<li>Reset user passwords and force password change at next logon<\/li>\n\n\n\n<li>Read all user information<\/li>\n\n\n\n<li>Create, delete, and manage groups<\/li>\n\n\n\n<li>Modify the membership of a group<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"654\" height=\"507\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/09\/delegate-control-wizard.jpg\" alt=\"\" class=\"wp-image-100207\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/delegate-control-wizard.jpg 654w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/delegate-control-wizard-300x233.jpg 300w\" sizes=\"(max-width: 654px) 100vw, 654px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Click <strong>Next<\/strong>, and then <strong>Finish<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-install-the-ad-sync-agent\"><strong><strong>Install the AD Sync Agent<\/strong><\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-create-an-adi-instance-in-jumpcloud\"><strong>Create an ADI instance in 探花大神<\/strong><\/h3>\n\n\n\n<p>Create a new ADI domain instance in 探花大神 if one does not already exist:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">探花大神 Admin Portal<\/a>.<\/li>\n\n\n\n<li>Navigate to <strong>Directory Integrations &gt; Active Directory<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"642\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/adi-instance.jpg\" alt=\"\" class=\"wp-image-100618\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/adi-instance.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/adi-instance-300x188.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/adi-instance-768x482.jpg 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"3\">\n<li>Click<strong> ( + Add ADI Domain )<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Manage users and passwords in 探花大神<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"511\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-1024x511.png\" alt=\"\" class=\"wp-image-114557\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-1024x511.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-300x150.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-768x383.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb-1536x766.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f23d5cb.png 1922w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Enter the name of an Active Directory domain that you want to integrate with your 探花大神 tenant. For example, \u201c<kbd>DC=example;DC=com<\/kbd>\u201d.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>The \u201cDC\u201d must be in capital letters. Each value must be separated with a semicolon (<strong>;<\/strong>) not a comma. There should be no spaces. The domain case must be the same as it is in the AD import configuration file.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"608\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-1024x608.png\" alt=\"\" class=\"wp-image-114558\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-1024x608.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-300x178.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b-768x456.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f26802b.png 1284w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"6\">\n<li>Click&nbsp;<strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-download-the-sync-agent\"><strong>Download the Sync agent <\/strong><\/h3>\n\n\n\n<ol>\n<li>Click <strong>Download Sync Agent<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"511\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f311e10-1024x511.png\" alt=\"\" class=\"wp-image-114561\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f311e10-1024x511.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f311e10-300x150.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f311e10-768x383.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f311e10-1536x766.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f311e10.png 1922w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"2\">\n<li>The Sync Agent installer will automatically save to your local <strong>Downloads <\/strong>folder.<\/li>\n\n\n\n<li>The <strong>Install Sync Agent<\/strong> modal appears and you will be presented with the <strong>AD Sync Agent Installation Connect Key<\/strong>. This is the unique one-time use key that is required to connect the Sync Agent to your 探花大神 Org and this AD domain Integration within 探花大神. You will input this key during the AD Sync Agent install in the steps below. Click <strong>Copy<\/strong> and save it to a password manager for later use.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"473\" height=\"512\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f3269aa.png\" alt=\"\" class=\"wp-image-114563\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f3269aa.png 473w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f3269aa-277x300.png 277w\" sizes=\"(max-width: 473px) 100vw, 473px\" \/><\/figure>\n\n\n\n<ol start=\"7\">\n<li>Click <strong>Close<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Configure ADI<\/strong>. <\/li>\n\n\n\n<li>A Details page will appear.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"511\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f382244-1024x511.png\" alt=\"\" class=\"wp-image-114568\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f382244-1024x511.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f382244-300x150.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f382244-768x383.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f382244-1536x766.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/Snag_1f382244.png 1922w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"10\">\n<li>Click <strong>Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-perform-a-one-time-import-of-users-from-ad-to-jumpcloud-optional\"><strong>Perform a one-time import of users from AD to 探花大神 (Optional<\/strong>)<\/h3>\n\n\n\n<p>If you need to import all your users or a subset of users from AD to 探花大神, there are two options:<\/p>\n\n\n\n<ol>\n<li>Import users using a CSV<\/li>\n\n\n\n<li>Install the AD import agent and sync users<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-option-1-import-users-using-a-csv\"><strong>Option 1: Import users using a CSV<\/strong><\/h4>\n\n\n\n<ol>\n<li>Export all users you want created in 探花大神 to a .csv file<\/li>\n\n\n\n<li>Follow the instructions in <a href=\"https:\/\/jumpcloud.com\/support\/import-users-from-csv-with-powershell-module\">Import Users from CSV with the PowerShell Module<\/a>.<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-option-2-install-the-ad-import-agent-and-sync-users\"><strong>Option 2: Install the AD import agent and sync users<\/strong><\/h4>\n\n\n\n<ol>\n<li>From the Details tab of the Active Directory Domain instance you create above, expand the <strong>Manage users and passwords in either system, or both<\/strong> section.<\/li>\n\n\n\n<li>Click the checkbox for This is my use case.<\/li>\n\n\n\n<li>Click Download Import Agent.<\/li>\n\n\n\n<li>Follow the instructions in <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-ad-to-jumpcloud\">Configure ADI to Manage Users, Security Groups, and Passwords in AD<\/a>.<\/li>\n\n\n\n<li>Add all users you want imported into 探花大神 into the ADI security group you created.<\/li>\n\n\n\n<li>Verify that the users were created in 探花大神.<\/li>\n\n\n\n<li>Open <strong>Start &gt; Control Panel &gt; Programs &gt; Programs and Features<\/strong> in AD.<\/li>\n\n\n\n<li>Uninstall the 探花大神 AD Import Agent.<\/li>\n\n\n\n<li>Click the <strong>Domain Agents<\/strong> tab in the Active Directory Domain instance in 探花大神.<\/li>\n\n\n\n<li>Verify that all rows are in yellow(i.e no longer active).<\/li>\n\n\n\n<li>Click the delete button for each import agent.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-run-the-ad-sync-agent-installation-wizard\"><strong>Run the AD Sync Agent Installation Wizard<\/strong><\/h3>\n\n\n\n<p>Now you are ready to install the 探花大神 Sync Agent on one or more member servers or your Primary DC and any DC within the domain impacted by extended replication delays.<\/p>\n\n\n\n<ol>\n<li>Browse to where you saved the AD Integration Sync installer file on your DC.&nbsp;<\/li>\n\n\n\n<li>Right-click the file, then select <strong>Run as administrator<\/strong>.<\/li>\n\n\n\n<li>Once the Installer Wizard appears, click <strong>Next<\/strong>.<\/li>\n\n\n\n<li>On the Destination Folder screen, click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1111\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828dcf2c6.png\" alt=\"\" class=\"wp-image-108450\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828dcf2c6.png 1111w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828dcf2c6-300x220.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828dcf2c6-1024x749.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828dcf2c6-768x562.png 768w\" sizes=\"(max-width: 1111px) 100vw, 1111px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Select the type of server on which you are installing the agent, DC or non-DC member server, then click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1111\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8298ab5ec.png\" alt=\"\" class=\"wp-image-108453\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8298ab5ec.png 1111w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8298ab5ec-300x220.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8298ab5ec-1024x749.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8298ab5ec-768x562.png 768w\" sizes=\"(max-width: 1111px) 100vw, 1111px\" \/><\/figure>\n\n\n\n<ol start=\"6\">\n<li>If you chose<strong> Domain Controller,<\/strong> skip to step 10.<\/li>\n\n\n\n<li>If you chose <strong>Member Server<\/strong> as your server type, enter the information for the DC to which the member server should connect to sync data from 探花大神 to AD. We recommend using the FQDN for your DC.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1081\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8275df0ba.png\" alt=\"\" class=\"wp-image-108444\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8275df0ba.png 1081w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8275df0ba-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8275df0ba-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8275df0ba-768x578.png 768w\" sizes=\"(max-width: 1081px) 100vw, 1081px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1081\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82915811a.png\" alt=\"\" class=\"wp-image-108451\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82915811a.png 1081w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82915811a-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82915811a-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82915811a-768x578.png 768w\" sizes=\"(max-width: 1081px) 100vw, 1081px\" \/><\/figure>\n\n\n\n<ol start=\"8\">\n<li>Confirm your LDAP connection type and decide if you want to allow the use of LDAP if the connection using secure LDAP fails.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>We <strong>STRONGLY recommend against<\/strong> allowing the use of LDAP if the connection using secure LDAP fails. LDAP is not secure and increases your potential risk of cyberattacks as it sends unencrypted data. Attackers can spy on the connection and intercept packets sent over the network. We <strong>STRONGLY<\/strong> recommend the use of LDAPS only for this integration.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"1081\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829f68e57.png\" alt=\"\" class=\"wp-image-108455\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829f68e57.png 1081w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829f68e57-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829f68e57-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829f68e57-768x578.png 768w\" sizes=\"(max-width: 1081px) 100vw, 1081px\" \/><\/figure>\n\n\n\n<ol start=\"9\">\n<li>If you checked <strong>Allow insecure connection (LDAP) to a Domain Controller, if secure connection fails<\/strong>, you must confirm that you understand the risk before you can proceed.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"1081\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828a964e3.png\" alt=\"\" class=\"wp-image-108449\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828a964e3.png 1081w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828a964e3-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828a964e3-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e828a964e3-768x578.png 768w\" sizes=\"(max-width: 1081px) 100vw, 1081px\" \/><\/figure>\n\n\n\n<ol start=\"10\">\n<li>Enter in the Root User Container you noted in the&nbsp; <strong>Determine the Root User Container in AD<\/strong> section above. If you\u2019re using the default AD Root User Container, the value will be CN=Users;DC=company;DC=com. If you\u2019ve chosen another Root User Container, enter the value you noted.\n<ul>\n<li>In this example, we\u2019ve modified the Root User Container. The value is:<strong>&nbsp;OU=Corporate Users;DC=example;DC=com<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Case is important when entering the User Root DN, always use capital \u201cOU\u201d, \u201cCN\u201d, and \u201cDC\u201d.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"770\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82723678a-1024x770.png\" alt=\"\" class=\"wp-image-108443\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82723678a-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82723678a-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82723678a-768x578.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e82723678a.png 1081w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"11\">\n<li>Enter the AD Sync Agent\u2019s Service Account you\u2019ve created. This should be the <kbd>jcsync <\/kbd>User Account you created in the <strong>Create the AD Sync Service Account<\/strong> section above. Then click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Case is important when entering the Windows Login Domain, use the same case that was used when creating the AD domain instance in 探花大神.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1081\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8294bd19e.png\" alt=\"\" class=\"wp-image-108452\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8294bd19e.png 1081w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8294bd19e-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8294bd19e-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e8294bd19e-768x578.png 768w\" sizes=\"(max-width: 1081px) 100vw, 1081px\" \/><\/figure>\n\n\n\n<ol start=\"12\">\n<li>Enter the Connect Key that was presented to you within the 探花大神 Admin Portal after downloading the AD Sync Agent. Then click <strong>Next<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1081\" height=\"813\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829c0f209.png\" alt=\"\" class=\"wp-image-108454\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829c0f209.png 1081w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829c0f209-300x226.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829c0f209-1024x770.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/04\/660e829c0f209-768x578.png 768w\" sizes=\"(max-width: 1081px) 100vw, 1081px\" \/><\/figure>\n\n\n\n<ol start=\"13\">\n<li>Finally, click the <strong>Install <\/strong>button to install the AD Sync Agent. This could take up to 3 minutes.&nbsp;<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>We <strong>strongly<\/strong> recommend <a href=\"https:\/\/jumpcloud.com\/support\/configure-adi-to-use-ldaps\">installing and using LDAPS<\/a> for the ADI. Configuring and using LDAPS on the Domain Controller that the Jumpcloud ADI agents will connect to secures any sensitive information that is exchanged between the Jumpcloud agents and the Domain Controller and protects against malicious users.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>You DO NOT need to reboot the servers after the AD Sync Agent installation.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-verify-ad-sync\"><strong>Verify AD Sync<\/strong><\/h3>\n\n\n\n<p>Once you\u2019ve installed and configured AD Sync within your AD environment. You can easily verify that the 探花大神 AD Sync Agent is working. Please ensure the following are present and visible:&nbsp;<\/p>\n\n\n\n<ul>\n<li>The 探花大神 AD Sync Agent should be shown as green and active within the Admin Portal under <strong>Directory Integrations &gt; Active Directory &gt; Domain Integration &gt; Domain Agents tab<\/strong>.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"829\" height=\"246\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/09\/Domain-agent-sync-screen.jpg\" alt=\"\" class=\"wp-image-100293\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/Domain-agent-sync-screen.jpg 829w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/Domain-agent-sync-screen-300x89.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/09\/Domain-agent-sync-screen-768x228.jpg 768w\" sizes=\"(max-width: 829px) 100vw, 829px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>If the AD Sync Agent(s) are showing red or are in a non-connected state, please check services.msc to see if the service is running.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-next-steps\">Next Steps<\/h2>\n\n\n\n<p>Please read the <a href=\"https:\/\/jumpcloud.com\/support\/use-the-Active-Directory-Integration\">Use and Manage the Active Directory Integration<\/a> article next.<\/p>\n\n\n\n<p><strong>Want additional assistance from 探花大神?&nbsp;<\/strong><\/p>\n\n\n\n<p>If you\u2019re having issues with getting 探花大神\u2019s ADI working, try the <a href=\"https:\/\/jumpcloud.com\/support\/troubleshoot-adi\">Troubleshooting Guide<\/a>.<\/p>\n\n\n\n<p>探花大神 now offers myriad professional services offerings to assist customers with implementing and configuring 探花大神. If you\u2019re looking for assistance with Migrating from AD, or to integrate AD with 探花大神, we recommend you reach out to 探花大神\u2019s Professional Services team on the following page: <a href=\"https:\/\/jumpcloud.com\/professional-services\">Professional Services &#8211; 探花大神<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The 探花大神 Active Directory Integration (ADI) enables the syncing of users, groups, and passwords between 探花大神 and on-premise or off-premise [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2904,2855,2954],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure ADI: Manage users, groups, and passwords in 探花大神 - 探花大神<\/title>\n<meta name=\"description\" content=\"Learn how to configure 探花大神&#039;s Active Directory Integration (ADI) to manage resources from 探花大神.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure ADI: Manage users, groups, and passwords in 探花大神\" \/>\n<meta property=\"og:description\" content=\"Browse the 探花大神 Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad\" \/>\n<meta property=\"og:site_name\" content=\"探花大神\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-02T08:42:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"13 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad\",\"url\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad\",\"name\":\"Configure ADI: Manage users, groups, and passwords in 探花大神 - 探花大神\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg\",\"datePublished\":\"2023-10-27T06:07:49+00:00\",\"dateModified\":\"2025-01-02T08:42:21+00:00\",\"description\":\"Learn how to configure 探花大神's Active Directory Integration (ADI) to manage resources from 探花大神.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg\",\"width\":729,\"height\":331},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Configure ADI: Manage users, groups, and passwords in 探花大神\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"探花大神\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"探花大神\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"探花大神\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Configure ADI: Manage users, groups, and passwords in 探花大神 - 探花大神","description":"Learn how to configure 探花大神's Active Directory Integration (ADI) to manage resources from 探花大神.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad","og_locale":"en_US","og_type":"article","og_title":"Configure ADI: Manage users, groups, and passwords in 探花大神","og_description":"Browse the 探花大神 Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad","og_site_name":"探花大神","article_modified_time":"2025-01-02T08:42:21+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"13 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad","url":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad","name":"Configure ADI: Manage users, groups, and passwords in 探花大神 - 探花大神","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg","datePublished":"2023-10-27T06:07:49+00:00","dateModified":"2025-01-02T08:42:21+00:00","description":"Learn how to configure 探花大神's Active Directory Integration (ADI) to manage resources from 探花大神.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/10\/JC-sync-single-domain-workflow.jpg","width":729,"height":331},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/configure-adi-sync-from-jumpcloud-to-ad#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Configure ADI: Manage users, groups, and passwords in 探花大神"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"探花大神","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"探花大神","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"探花大神"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97082"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97082\/revisions"}],"predecessor-version":[{"id":119419,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/97082\/revisions\/119419"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=97082"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=97082"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=97082"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=97082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}