NetIQ Multi-Domain Active Directory Driver Implementation Guide

  NetIQ Multi-Domain Active Directory Driver Implementation Guide
    Understanding the Multi-Domain Active Directory Driver
      Key Terms
      Data Transfers Between Systems
      Support for Standard Driver Features
      Default Driver Configuration
      Checklist for Enabling User Synchronization
    Preparing Multi-Domain Active Directory
      Driver Prerequisites
      Deploying the Multi-Domain Active Directory Driver
      Securing Driver Communication
      Creating an Administrative Account
      Configuring System Permissions
      Windows Message Queuing Permissions
      Becoming Familiar with Driver Features
    Installing the Driver Files
      Preparing for Driver Installation
      Installing the Driver Files
      Configuring the Multi-Domain Active Directory Driver
    Creating a New Driver
      Creating the Driver in Designer
      Activating the Driver
      Adding Packages to an Existing Driver
    Upgrading an Existing Driver
      Supported Upgrade Paths
      What’s New
      Upgrading the Driver
    Synchronizing Passwords
      Securing Driver Connections
      Setting Up Password Synchronization Filters
      Retrying Synchronization after a Failure
      Disabling Password Synchronization on a Driver
      Diagnosing Password Synchronization Issues
    Managing Active Directory Groups and Exchange Mailboxes
      Managing Groups
      Managing Microsoft Exchange Mailboxes
    Provisioning Exchange Mailboxes
      Setting Up Domains for Exchange Provisioning
      Setting Up Exchange Server Permissions
      Supported Operations on Exchange Mailboxes
    Configuring PowerShell Support
      Overview of PowerShell Functionality
      System Requirements
      Implementing PowerShell Cmdlets in the Multi-Domain Active Directory Driver
    Security Best Practices
      Security Considerations
      Default Configuration of the Security Parameters
      Recommended Security Configurations for the Simple Authentication Method
      Issues with Setting Up Domain Connection Passwords in iManager
      Data Protection from Unauthorized Access
      Error Displays When Shutting Down the Driver
      Error Displays When Stopping the Remote Loader Service
      Issues with User Account Reconciliation in Resource Catalog
      Changes Are Not Synchronizing from the Publisher or Subscriber
      Using Characters Outside the Valid NT Logon Names
      Synchronizing c, co, and countryCode Attributes
      Synchronizing Operational Attributes
      Password Complexity on Windows Server
      Tips on Password Synchronization
      Where to Set the SSL Parameter
      Password Filter Synchronization State Definitions
      The Active Directory Account Is Disabled after a User Add on the Subscriber Channel
      Restoring Active Directory
      Setting LDAP Server Search Constraints
      Error Messages
      Driver Binaries Fail to Load on Windows 2012 Devices
      Setting a Password in Multi-Domain Active Directory Driver Resets the eDirectory Password Expiration Date to the Current Date
      Troubleshooting Driver Processes
    Known Issues
      Loss of Existing Resource Assignments During Upgrade
      Issue with Enabling Out of Band Sync for Attributes with Distinguished Name Syntax
      Applying the Latest Driver Package Does Not Change the Default Setting of Enable Service Channel ECV
      32-Bit pwfilter.dll File Is Not Available
    Driver Properties
      Driver Configuration
      Global Configuration Values
    Migrating Users Per Domain
    Trace Levels
    Microsoft Windows Events
    Legal Notice