Hi All,

I’m doing some testing with AD groups and Rio and I’m confused a little as to what the process should actually be, and what should actually be a supported configuration.

So I’ve setup LFDS with an AD group with some users in, which synchronises and adds the group to the organisations tab with the users inside this with full licenses. All seems good.

Then I move onto the Laserfiche server (which is on the same server FYI), where I then add the same AD group as a windows account and set it to trusted. However I cannot login using a user within the group which has a full license. Even if I explicitly add the users and set it to inherit from group membership it still can’t log in. I’ve tried re-starting the Laserfiche server, deleting the LFSNU.DB file etc., but none of these allow the user to login. The only way I seem to be able to make this work, is to add the user as a windows account and set it to trust. Then it logs in. Which brings confusion?

What is the point of synchronising AD groups into LFDS if you still have to manually add the user into the LF admin console in order to grant access? Or shouldn’t this be the case? I’ve had a hunt around some other posts but none really answer this question.

Something else I wasn’t sure about is do the different types of AD groups have any impact on LFDS or Laserfiche in general? (Distribution group, security group, global, universal or domain local)

Cheers!