Active Administrator 8.6.3 - User Guide

Adding a forest

Adding a forest

To add a forest to replication monitoring

1	Select Active Directory Infrastructure | Replication Monitoring.

2	Click Add Forest.

3	By default, replication monitoring is enabled. To disable replication monitoring for the forest, clear the check box.

4	Browse to select a forest.

5	Select to use either the Active Administrator® Foundation Server (AFS) service account or a different account. If you chose a different account, enter the user name and password.

6	In the Excluded domain controllers area, expand domains, and select the domain controllers to exclude.

NOTE: To filter the list of domain controllers, start typing in the Filter box. NOTE: If you changed the account, click Refresh to load the list of domain controllers.

7	Optionally, type the name of a domain controller to exclude in the Enter domain controller name if you don’t see it in the list text box and click Add.

8	Click Validate to verify the account.

9

Click OK.

Using the replication analyzer

Using the replication analyzer

Before you replicate Active Directory® for an entire forest, site, or single domain controller, you can test the replication to check for any errors. You also can monitor the replication as it progresses.

To run a replication

1	Select Active Directory Infrastructure | Replication Analyzer.

2	Select a domain controller.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Set options for the replication analyzer.

a	Click Options.

b	Accept the current account, or select Use the following account, and enter the user name and password.

c

Click OK.

4	Test the replication.

a	In the left pane, select the domain to replicate.

b	Select either the forest root to test all servers in the forest, a site to test all servers in that site, or an individual server to test just that server.

c	Click Start Test.

d	Check the list of included servers. All domain controllers are selected by default. To exclude a domain controller from the test, clear the check box.

e

Click OK.

During the analysis (pending) displays after each server being analyzed. To stop the analysis, click Stop Test. When the analysis is complete, the results display in the Replication Test Results area.

f	Double-click an item in the Replication Test Results area to view the details. You can copy the results and paste into a text file.

g	Click Close.

5	Check the topology.

a	Click Check Topology.

b	Check the list of included servers. All domain controllers are selected by default. To exclude a domain controller from the test, clear the check box.

c

Click OK.

6	Select the forest root, a site, or an individual server, and then Replicate All or Replicate.

Managing Active Directory trusts

Managing Active Directory trusts

You can now manage forests and trusts from within Active Administrator®.

Topics 

•	Adding a forest trust

•	Adding a domain trust

To manage Active Directory® trusts

1	Select Active Directory Infrastructure | Active Directory Trusts.

2	Select a domain controller.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Use the options on the tool bar to manage Active Directory trusts.

The options change depending on whether a forest or a domain is selected.

 

Table 99. Active Directory trusts tool bar

Option	Description
Refresh Tree	Refresh the tree.
Refresh Trusts	Refresh the list of trusts.
New Forest Trust	Add a forest trust. See Adding a forest trust.
New Domain Trust	Add a domain trust. See Adding a domain trust.
Edit	Edit the selected trust.
Delete	Delete the selected trust. NOTE: You can remove the trust from the local domain only or from both domains. If you choose to remove the trust from both domains, you must enter the user name and password for the account with administrative privileges in the target domain.
Build Forest Trusts Report	Generate a forest trusts report that you can print, email, or export.
Build Domain Trusts Report	Generate a domain trusts report that you can print, email, or export.

Adding a forest trust

Adding a forest trust

To add a forest trust

1	Select Active Directory Infrastructure | Active Directory Trusts.

2	Select a domain controller.

NOTE: Use the icons to manage the selected managed domain controller. See Managing domain controllers.

3	Click New Forest Trust.

4	Type a target forest, or browse to select a forest.

5	Select the direction.

 

Table 100. Options for authentication

Option	Description
Bidirectional (two-way)	Users can be authenticated in the source and target forest.
Incoming (one-way)	Users in the source domain can be authenticated in the target forest.
Outgoing (one-way)	Users in the target forest can be authenticated in the source domain.

6	Select the sides of the trust. If you choose both sides of the trust, you must enter the user name and password for the account with administrative privileges in the target domain.

 

Table 101. Options for authentication

Option	Description
This domain only	Creates the trust relationship in the local domain.
Both this domain and the specified domain	Creates the trust relationship in the local domain and the target domain. You must have appropriate permissions in both domains.

7	Select the authentication for the source and target: Forest-wide or Selective.

8

Click OK.

9	Click Validate.

10

Click OK.