AD Sync Client Install Guide. Contents

Transcription

1 AD Sync Client Install Guide Contents AD Sync Client Install Guide... 1 Introduction... 2 Deployment Prerequisites... 2 Configure SQL Prerequisites... 3 Switch SQL to Mixed Mode authentication... 3 Create the ExtendAdmin SQL login... 3 Install AD Sync Database... 4 Install Ion System... 5 Create Security Users and Groups in Active Directory... 6 AD Sync Setup... 7 Install EPS AD Sync Password Monitoring... 8

2 Introduction This document walks through the installation of the AD Sync Engine and Domain Controller Sync Client. Both components will need to be installed before Active Directory data can sync to CallTower. You will need to allow inbound traffic on ports 5600 & 5605 from to the server where the AD Sync Engine is installed, and outbound traffic on port 5600 to Please provide your Implementation Manager with the public IP address of the AD Sync Engine server once you have opened the ports. The system can sync new and existing users into the CallTower environment, but existing users will not get their passwords synced until the first time they change the password in your environment after the client installation is complete. Deployment Prerequisites Before you deploy the AD Sync Engine system, please install the prerequisites:.net Framework 4.5 o SQL Express o o SQL versions 2012 and newer are recommended SQL Express can be installed on the server that will run AD Sync Engine, or on another server in the network. A full installation of SQL Server can also be used if desired. While not recommended, all components can be installed on a domain controller if desired. Before installing the AD Sync Engine, please validate your user data. It is expected that your userprincipalname will match the user s address set up in CallTower Connect. Typically, this is the user s primary address.

3 Configure SQL Prerequisites Switch SQL to Mixed Mode authentication 1. Make sure during installation, that you set SQL to Mixed Mode. If not using Express, do the following: 1. Log into the SQL server on which you plan to install the EPS database 2. Run SQL Server Management Studio 3. Connect to the SQL instance 4. In the Object Explorer pane, right-click the name of the server, and then click Properties. 5. Go to the Security page. 6. Under Server authentication, select SQL Server and Windows Authentication mode, then click OK. 7. Restart the SQL service to bring the change into effect. Create the ExtendAdmin SQL login 1. In SQL Server Management Studio, expand Security (in the Object Explorer pane). 2. Right-click Logins, and then click New Login. 3. Enter ExtendAdmin as the Login name, and select SQL Server authentication. Enter a password, and clear the enforce password expiration checkbox. 4. Go to the Server Roles page, and select sysadmin. Then click OK.

4 Install AD Sync Database 1. You will find a folder adsync db upgrader.zip in the install package. Run the application (ExtendASP.DbUpgrade.Client.exe) 2. You will need to set the SQL server address, and the password for ExtendAdmin. 3. If the database doesn t already exist, choose to create the database 4. Upgrade the database to the latest build (if the target version dropdown is blank, you are at the latest build).

5 Install Ion System 1. On your Engine Server run the IonCloudEngine installer. 2. Make sure all the features are enabled: 3. Click Next and continue until the installer is finished.

6 Create Security Users and Groups in Active Directory 1. Navigate to the location C:\Program Files (x86)\extendasp\eps\ion Cloud Engine Config Utility 2. Right click on the Ion Cloud Engine Utility program and Run as Administrator. 3. Create passwords for the service accounts. 4. Click Create AD Objects. 5. At the end of this process, it will pop up a dialog window with some encrypted data in it. Select all the data in the window and save it to a text file. You will need to send this file to your Implementation Manager at CallTower.

7 AD Sync Setup 1. Click on the AD Sync Setup tab. 2. AD Sync Environment Guide - this will be provided to you by your Implementation Manager. 3. Preferred Domain Controller - enter the FQDN of a domain controller in the same site as this server. 4. AD Sync Cookie File Path enter the path of a local directory that the Engine can use to store temporary data.

8 5. Database Settings a. Server Name enter the FQDN of the SQL server. If SQL Express was installed locally, enter the FQDN of this server. b. Login Name and Password enter the credentials of the SQL service accounts created earlier (usually ExtendAdmin) 6. AD Sync Organization Units click Add and select any OUs in your environment that contain users with CallTower service. Install EPS AD Sync Password Monitoring 1. NOTE: This MUST be installed on each domain controller in any site where users have CallTower service. 2. If not already present, download and install.net Framework Run EPSAsyncSyncPasswordMonitor.exe and follow the instructions on the screens. 4. Update the config file (C:\Program Files\ExtendASP\EPS\AD Sync Password Monitor\ExtendASP.EPS.ADSync.PasswordMonitor.exe.config) a. IonCloudEngineHostName enter the FQDN of the AD Sync Engine server in your network b. IonCloudEngineAuthUsername enter the userprincipalname of the IonCloudEngineUser account created earlier c. IonCloudEngineAuthPassword enter the password of the IonCloudEngineUser account 5. To complete installation you will need to restart the domain controller.