BOXI - Windows AD - Multiple AD domain groups

[Former Member]

Hi,

We have groups from different AD domains and we need to map all these groups to BOXI. Currently we have mapped a group from one domain 'Dom1' & have made it as the default domain (Default domain -> Dom1 & Administration credentials -> Dom1\AdminUser).

Can you guide me how to map groups from other AD domains to BOXI??

[BasicTek · Accepted solution]

If the domain is in the same AD forest then you should be able to map in groups from any other domain in the same forest simply by using domain\group. If this doesn't work, make sure that the domain in question is in the same AD forest, You can also add a CMS registry string or dword UseFQDNForDirectoryServers True. There is an SAP note on it with more detail if you search that term.

If the domain is in another forest then you will have to use another plugin (LDAP/NT) in XI versions prior to 3.1. If you have XI 3.1 which has added multiple forest support then all you need to do is to make sure a 2 way trust exists between domains.

Regards,

Tim.