Question

Adding Active Directory Group to LF 10 Repository

Updated June 23, 2016

asked on June 23, 2016

I have an AD group called "Laserfiche" which contains all the users who will have Laserfiche access. I used this group in Directory Server to license all the users in the group. What is the procedure to now adding these users to the Repository?

I would like to create additional groups in the repository that will be a sub-set of the this group so I'll need to get to the individual AD accounts - how can I get them to show up under Windows Accounts?

Thanks for your help!

Sandy

0 0

Replies

replied on June 23, 2016

You need to ensure that the AD user is set to 'trusted' for authentication. There's a few ways to do that. The simplest is to set 'everyone' to trusted - that means that anyone with a license can at least sign into the repository. If you want to get more specific you can manually create the AD subgroup matching your AD group in the admin console and set that to trusted.

1 0

replied on June 23, 2016 • Show version history

Hi Sandy,

The users will automatically show up under windows accounts as they sign-in, but you don't need to manually add them. You could create the repository groups and then just indicate which AD users or AD groups you want affiliated with that repository group in the repository group property dialog, you don't have to manually add them first.

Added: This would be in the 'domain trustee linking' section of the members tab.

0 0

replied on June 23, 2016

I think I must be missing something.

1. I added the Laserfiche group in Windows Accounts and made them trusted.

2. Then I created a NW-Users group and the members are the Laserfiche AD group.

3. I gave the NW-Users group rights to scan, etc. and also at the folder level.

4. I try logging in with WA as one of the members of the group and I'm getting access denied.

Thanks

Sandy

0 0

replied on June 23, 2016

When I try creating a new group and try to add an AD user it's telling me there's no match.

0 0

replied on June 23, 2016

OK I just realized that the name it's looking up is the first name.... so I was able to see the AD users to add them to another group. But it still doesn't explain the access denied when I try to login.

0 0

replied on June 23, 2016

Trusting the Everyone group I think was the key. Thanks for your help, everything seems to be working now.

0 0

You are not allowed to follow up in this post.

Question

Question

Adding Active Directory Group to LF 10 Repository

Replies

Sign in to reply to this post.