立即与支持人员聊天
与支持团队交流

Migrator Pro for Active Directory 20.11 - Requirements and Installation Guide

Section 1. Introduction Section 2. Directory Sync Pro Prerequisites Section 3. Directory Sync Pro for Active Directory Advanced Network Requirements Section 4. Migrator Pro for Active Directory Prerequisites Section 5. Requirements for Both Directory Sync Pro for Active Directory and Migrator Pro for Active Directory Section 6. Installing Directory Sync Pro for Active Directory and Migrator Pro for Active Directory Section 7. Upgrading Directory Sync Pro for Active Directory and Migrator Pro for Active Directory Section 8. Modifying, Repairing and Uninstalling Directory Sync Pro for Active Directory and Migrator Pro for Active Directory Section 9. Migrator Pro for Active Directory Agent Installation Section 10. Troubleshooting Appendix A: Configuring Directory Sync Pro for Active Directory in a Non-English Active Directory Environment Appendix B. Installing and Configuring SQL Server Reporting Services Appendix C. STIG Environments Appendix D. Deployment in FIPS Environment

Verifying the Report Server URL

The Report Server URL is needed when installing the Reporting feature. Use the following steps to verify the correct URL to use.

  1. Open Reporting Services Configuration Manager.

  2. Provide the SQL Server Name and Report Server Instance name and click Connect.

    Reporting_Services1

  3. In the left folder navigation, select Web Service URL.

  4. The Report Server URL appears in the Report Server Web Service URLs section.

    Reporting_Services2

 

 

Appendix C. STIG Environments

Please note the following considerations for STIG environments.

SQL Express

The SQL Express option should not be chosen when installing Binary Tree Directory Sync Pro for Active Directory and Migrator Pro for Active Directory. SQL Express does not include the following settings or features needed for STIG environments:

  • SQL Server must be monitored to discover unauthorized changes to stored procedures. (SQL Agents is not part of SQL Express) 41403, 41404, 41405

A dedicated SQL Server (full version) should be used.

SID History

In order for SID History copy to function in a STIG environment, additional security setting changes are needed in GPO on the domain controller. 

By default, Success and failure auditing of account management must enabled for both source and target domains via local security policy or GPO.  However, because “Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings” is enabled per STIG policy, additional audit policy settings must be configured for both source and target domains.

To configure the audit policy settings:

  1. Navigate to the "Advanced Audit Configuration" settings in the Default Domain Controllers Policy (Computer Configuration\Policies\Windows Settings\Security Settings\Advanced Audit Policy Configuration\Audit Policies).

  2. Enable all the Subcategories of DS Access (Success) and Account Management (Success, Failure). 

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级