Configuration 2015 Guide Follow the simple steps given in this document when you are going to run Lepide Active Directory Cleaner for the first time. Configuration Guide for the Lepide Active Directory Cleaner
Table of Contents 1. System Requirements... 3 2. Domain Configuration - Active Directory Domain Information... 4 3. Email Configuration... 7 3.1 If you are using Exchange Server as Email server... 9 4. Alert Configuration... 10 Copyright 2015 Lepide Software Pvt. Ltd. 2
1. System Requirements Lepide Active Directory Cleaner needs some basic system requirements to run: Basic System Requirements: Pentium Class Processor Windows XP or higher (Both 32-bit and 64-bit as relevant) Windows Server 2003 or higher (Both 32-bit and 64-bit as relevant).net Framework 4 Copyright 2015 Lepide Software Pvt. Ltd. 3
2. Domain Configuration - Active Directory Domain Information The first step in Software configuration requires you to configure domain by providing Domain credentials. You can either provide the Domain name, or provide IP of the PDC or any of the BDCs. You can add multiple domains to software; to add a domain use Add Domain button on the toolbar. Figure 1: Domain Credentials Copyright 2015 Lepide Software Pvt. Ltd. 4
User account provided in the above screen should have following rights: 1. Account should be a member of the Administrators and Domain Admins group Steps to assign the above mentioned rights: A. Go to Administrative Tools B. Open Active Directory Users and Computers C. Select User Properties D. Click Member Of E. Click Add Group F. Select the following Groups: Administrators, Domain Admins G. Click Apply and then click Ok Figure 2: Administrative Properties Copyright 2015 Lepide Software Pvt. Ltd. 5
2. User should have following permissions on local computer on which software is installed: A. Full access permission over drive in which Operating System is installed B. Read/Write permissions in the registry Steps to assign these permissions are: I. Go to Control Panel II. III. IV. Select the User Account Select Change Account Type Make User as Administrator V. Click on Save Note: 1. Steps mentioned above may vary depending on the Windows version 2. If the User Account doesn t exist on the system, create a new User Account with Administrative rights Copyright 2015 Lepide Software Pvt. Ltd. 6
3. Email Configuration Once the Domain has been added, you can proceed to Email Configuration to configure mail server settings. It is essential to configure mail server settings before you can start sending Alerts and Schedule Reports. Mail Server Name/IP: Provide Mail server s name or IP. SMTP port: Provide port number. The default value for most email servers is 25 without SSL. If the server requires authentication, select Server Requires Authentication checkbox and provide User Name and Password in the respective fields. If the server requires SSL encrypted connection, select the checkbox against it and enter the value provided by the email server for it. Sender s Email: Provide email address, which will be used for sending Alerts and Schedule Reports. Use Send Test Email button to send a test mail to check if mail server setting has been configured correctly. Copyright 2015 Lepide Software Pvt. Ltd. 7
Figure 3: Configure Email Settings Copyright 2015 Lepide Software Pvt. Ltd. 8
3.1 If you are using Exchange Server as Email server If you are using Exchange Server 2007, 2010, or 2013 as your email server, recipients may not receive Alerts/Scheduled Reports even after you have configured the email server. In that case, follow these simple steps to complete the configuration: 1. Open Exchange Management Console 2. Expand Server Configuration option and click Hub Transport 3. Open Properties of Receive Connectors 4. Go to Permission Groups and enable Anonymous Users. 5. Click Apply Copyright 2015 Lepide Software Pvt. Ltd. 9
4. Alert Configuration Once the Domain configuration and Email configuration is complete, you can proceed to configure Alerts. Alert Configuration allows administrators to take necessary actions after Accounts have become inactive. Administrators can set random passwords, disable accounts, move accounts to a particular OU, and delete accounts after specified number of days since they have become inactive. To configure Alerts, click Alert Configuration option under Settings pan. Alert Configuration page appears. Figure 4: Alert Configuration Copyright 2015 Lepide Software Pvt. Ltd. 10
You need to do the following settings under this page: Selected OUs: Select the OUs for which the settings done here will be applicable. Use Select OUs button to select the OUs from the list of available OUs in the Domian. Generate Alert At: Specify the time at which the Alert will be generated. Set Account Inactivity period: Specify the number of days since last logon after which the Account will be considered as Inactive. Select Email Template: Click Add icon to create a new Email template. You can also use the default Email template which contains all the information related to the Account. In the new Email template, you can deselect the information which you don t want to include in the report. Figure 5: Create New Alert Template Copyright 2015 Lepide Software Pvt. Ltd. 11
Select Action Template: This feature allows you to select the actions which you want to perform with the inactive accounts. Provide a name to the template. In the Account Type field select if the actions are to be performed for Users, Computers, or both. Select the checkboxes against the Actions and specify when these actions will be performed in the Day(s) field. For example, if you select Set Random password After checkbox and provide 50 in the Day(s) field, LADC will set a random password for all the Accounts which are inactive for 50 days. Select Notify Administrator checkbox to inform administrator as and when these actions are performed by the application. Figure 6: Action Settings Copyright 2015 Lepide Software Pvt. Ltd. 12
Exclude Accounts: Lets you exclude Accounts from the Action settings done in the previous step. It has Administrator by default which must exist in this field, other accounts can be added by using Select button. Figure 7: Exclude Accounts Administrator E-mail Address: Provide administrator's Email address to which alerts and notifications will be sent. Click 'Apply' to save the changes. Copyright 2015 Lepide Software Pvt. Ltd. 13