Administrator's Guide - Kerio Software Archive

16.1 Viewing and definitions of user accounts
Note: This type of cooperation with Active Directory applies especially to older versions of
Kerio Control and makes these versions still compatible. In case of the first installation of
Kerio Control, it is recommended to apply transparent cooperation with Active Directory
(so called domain mapping).
Transparent cooperation with Active Directory (Active Directory mapping)
Kerio Control can use accounts and groups stored in Active Directory directly — no import
to the local database is performed. Specific Kerio Control parameters are added by the
template of the corresponding account. These parameters can also be edited individually.
This type is the least demanding from the administrator’s point of view (all user accounts
and groups are managed in Active Directory) and it is the only one that allows using
accounts from multiple Active Directory domains.
Note: In cases when users are authenticated at the domain (all described types excluding the
first one), it is recommended to create at least one local account in Kerio Control that has both
read and write rights, or keep the original Admin account. This account provides connection
to the Kerio Control administration in case of the network or domain server failure.
16.1 Viewing and definitions of user accounts
To define local user accounts, import accounts to the local database or/and configure accounts
mapped from the domain, go to the User Accounts tab in the Users and Groups → Users
section.
Figure 16.1
Kerio Control user accounts
Domain
Use the Domain option to select a domain for which user accounts as well as other
parameters will be defined. This item provides a list of mapped Active Directory domains
(see chapter 16.4) and the local (internal) user database.
215