Stay tuned for that…. Following are 10 screenshots of my setup in the tool. The Yellow Highlighted text at the left of each screen shot shows where I am in the configuration and if a screen is skipped, the fields there have been left blank. You have to get the passwords into an attribute field within Active Directory for this to work. I found this link that helped explain why the passwords would not sync. The tool can be found here. I plan on doing that as I migrate my users over the next few weeks.
So now, how does Google Apps stay synchronized with Active Directory? Setup a Scheduled Task on your server to launch at whatever frequency you feel is necessary.
If you need to update in a more timely manor, just manually launch that scheduled task. On the Run line in the Scheduled Task I have the following:.
This batch file is then attached to a Scheduled Task. In the Batch file my commands are as follows:. If you see items that need to be clarified, please let me know so that I can make this easier for everyone! Create a free website or blog at WordPress. Posts Comments. Like this: Like Loading Twitter Feed TomBuck Umm. Looks like it to me. Kinda obvious, right? Second — the students would have to know which attribute to look for in order to even find the hash.
In my opinion, the is a small risk of that but am I staying up at night worrying a out it? I have larger fish to fry. You are commenting using your WordPress. You are commenting using your Google account.
You are commenting using your Twitter account. You are commenting using your Facebook account. Notify me of new comments via email. Notify me of new posts via email. Posts Comments. Like this: Like Loading April 14, at PM. Hey Kris, Thanks for the comment. Question for you: How does using SSO effect mobile users?
Thanks again for the comment! Chris Francy says:. October 19, at PM. Kris Hagel says:. April 15, at PM. Abdul Waheed says:. September 4, at PM. September 5, at PM. It is the reset of the password that initiates the capture of the password by the dll file.
September 6, at AM. September 6, at PM. Dan Monighetti says:. September 9, at PM. Thanks, Dan. BP says:. April 22, at PM. May 5, at PM. Jordan says:. May 24, at PM. May 28, at AM. Google Apps Directory Sync is a somewhat essential tool if you want to manage even a moderately sized Google Apps deployment, because it will synchronise your user accounts including passwords with an LDAP server such as Active Directory.
Compared with the somewhat tortuous process of accomplishing the same thing with Live edu, the Google system is a clear winner. Apart from when it comes to actually running it on a modern Windows system. It starts off badly when reading the Features and Benefits section of the otherwise excellent administration guide :. Not, say, Windows Server or Server , the actual server environments. Only a moron would run a Windows server with UAC turned off, so I got caught out by this immediately.
Basically, the Simulate button will grey out, then do nothing. Running the tool with elevated credentials immediately solves the problem. No wonder they think Windows is so bad. So why does it happen? So, when the tool tries to log its simulation process, it is denied access to write to its own log file.
Not that it tells you this, of course. Why would there be any error boxes? You can either solve this by always running the tool with elevation, or by adding an ACL entry to the Google Apps Directory Sync folder in Program Files so that whatever user you are running the tool under has permission to write to the log file.
Tags: gads , google , googleapps. My view is that as soon as you slap your logo on it, you get to be the fall guy. Not that it will make you feel any better, but the potential for that problem did occur to me when I was setting up my config. Something else that could do with being in the documentation? Thanks for the tip.
0コメント