Active Administrator 8.6 - Installation Guide

Storing Active Administrator data

The Active Administrator Path Selection page displays the default path to the folder where the Active Administrator data is stored.

The install process creates the ActiveAdministrator share, which contains five subfolders in which Active Administrator data is stored: ActiveTemplates, ADBackups, Config, GPOHistory, and GPORepository. You can create your own share as long as it resides on a server that is accessible by all Active Administrator users. Make sure the share has sufficient hard drive capacity. You can estimate that each GPO initially takes 2MB to back up. Each version saved thereafter is significantly smaller, about 10k on average. If you have a large Active Directory® database, you should have 10GB available.

IMPORTANT: If you create a share manually, you must use the name ActiveAdministrator for that share. Set authenticated users full control on the share permissions. If you would like to restrict permissions further, you can change the NTFS permissions.

NOTE: You should have at least 2GB of free space available on the drive you select. If you have a large Active Directory database, ideally, you should have 10GB free.

Setting up the email server

The Active Administrator notification service sends automatic emails to specified recipients. On this page, identify the email server to use.

NOTE: After you complete the configuration wizard, you can use the Active Administrator Console to modify the email server settings by selecting Configuration | SMTP Settings.

Setting up features and the owner

On many tasks, an email is sent automatically to the Administrator’s email address. You also have the opportunity to enable or disable key features of Active Administrator®. If you disable a feature, you can enable it within the Active Administrator console.

NOTE: The first time you run the configuration wizard, the check boxes are enabled. The next time you run the configuration wizard, the check boxes are disabled, so you need to use Active Administrator Console to enable/disable the features. • Inactive Users and Computers To modify the feature, finish the wizard, start Active Administrator Console, and select Security & Delegation | Inactive Accounts. • Change Your Password Reminder Policy To modify the feature, finish the wizard, start Active Administrator Console, and select Security & Delegation | Password Policy. • Enable Account Expiration Notification To modify the feature, finish the wizard, start Active Administrator Console, and select Security & Delegation | Account Expiration. • Active Directory Replication Monitoring To modify the feature, finish the wizard, start Active Administrator Console, and select AD Infrastructure | Replication Monitoring. • Active Directory Health Assessment Reports To modify the feature, finish the wizard, start Active Administrator Console, and select Settings | Assessment Report.

Configuring active template delegation enforcement

Active Templates, which are used to grant specific sets of Active Directory® rights to an object, can be configured so that they are automatically reapplied if any of their permissions within the template are accidentally removed. Additionally, you can alert administrators automatically by email when an Active Template is repaired.

NOTE: After you complete the configuration wizard, you can use the Active Administrator® Console to manage active template delegation enforcement by selecting Configuration | Active Template Settings.

NOTE: You must have configured the Email server to continue. If necessary, click Back to return to the Email Server Settings page. See Setting up the email server.