You are viewing limited content. For full access, please sign in.

Question

Question

See all members of Active Directory group in Laserfiche

asked on September 14, 2015

In Laserfiche is it possible to view users by the Active Directory group they belong to? Possibly using a node search or within the license manager? 

0 0

Replies

replied on September 14, 2015

Are you using Laserfiche Rio or Avante?

 

I know when we have Avante version of laserfiche I was able to display the members of A/D groups using the laserfiche admin console.

 

When we switched to Rio and installed directory server my admin console lost the capability of listing members from A/D in the admin console.

 

 

1 0
replied on September 15, 2015

Rio or Avante should not matter for my answer above: what differs for AD users is whether the named user licenses for AD users are assigned in the admin console (Avante) or in License Manager/LFDS (Rio). You still must "trust" AD users/groups so that users can log in to a given repository, and you must still manage their privileges in the admin console

replied on September 14, 2015

You can view a list of all the users in a group that has been added to the Window's node in the Admin Console by going to Windows Accounts and double-clicking the group (or right click -> Properties) The properties dialog has a list of all users at the bottom:

You an also bring up the list in a bigger window by clicking "Display Members..."

From the license manager or LFDS, you can also show all the members in a group when you are registering users by searching for the group name, then expanding the node for the group.

If this is not what you were looking for, can you please elaborate on what you need this for? Laserfiche isn't intended as a directory management tool, so if you are looking to explore AD groups, you would be better served by an AD management tool.

0 0
replied on October 28, 2015

As Ivan point out I'm using Rio 9.0 and I don't see this list of users when I view the properties.

I also do not understand how to do what you referred to in the License Manager - can you explain in more detail?  All I'm trying to do is answer the question of which users belong to a group. Our groups align with departments - sometimes a manager wants to know who is licensed within their department. Currently all i can think of to do is to send a screen shot of all the Named Users in License Manager (v 8.3) and let them count their users by name. It seems I should be able to see a list in Laserfiche of who is in what group. Otherwise I have to send a request to Network Services to ask for a list of the members in an AD group.

0 0
replied on October 29, 2015 Show version history

When you are adding users manually (rather than using AD sync) the list of users in a group is visible from the user picker:

You can use this to view the members of the group without actually adding anyone, but it won't tell you who has what kind of license.

One possibility is to implement organizations that reflect your companies departmental structure, and manually or using AD sync, place members of specific AD groups within their corresponding organizations. Using AD sync would be the recommended method so that the membership in LFDS would be updated if changes were made in windows AD. You would then be able to view all members of an organization, or filter by organization.

The current goal of displaying members of an AD group in LFDS (Rio) or in the admin console (Avante) is to allow administrators to assign licenses to specific members within a group, not to just view who is present in a group, so that's how the UI is designed.

That said, thank you for sharing your use case, and I'll bring it up with the teams.

0 0
replied on October 30, 2015

Barry,

 

It was little frustrating to use the ability to see A/D groups along with the users that were part of the A/D group from Laserfiche Admin console. If you didn't want everyone to have access to be a named user you just unchecked there account.

Now you have to go to Laserfiche Directory server and remove there account.

 

When we upgraded I had to add every single user into Laserfiche Directory Server so they will get there named user licenses privilages back. It looks like the Laserfiche Admin console now just controls rights that you want to give that group / user. 

 

 

 

0 0
replied on October 30, 2015

Have you tried the Active Directory synchronization feature in Directory Server? It will automatically add the users in a specified active directory group and assign them licenses.

1 0
replied on October 30, 2015

Miruna, 

 

I was not aware of this tab. I will turn on the feature for future users that I add to my A/D Group.

 

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.