Administrator's Guide - Kerio Software Archive

User Accounts and Groups
Figure 16.13
Advanced options for cooperation with the Active Directory.
If Kerio Control is installed on Windows, it is possible to allow authentication compatible
with older systems (i.e. authentication via the Windows NT domain). This option is
required if the domain server uses Windows NT or if any of the clients in the local network
uses Windows of older edition than Windows 2000. In Software Appliance / VMware Virtual
Appliance, this option is not available (authentication in Windows NT domain is not
supported).
Then, the settings include an option of automatic import of user accounts from the Active
Directory to the local database (upon the first logon of user to the firewall by their domain
name and password, an account with the same name will be created in the local database
automatically). This option is helpful only for compatibility of older versions of Kerio
Control (Kerio WinRoute Firewall). In new installations it is strongly recommended to
use domain mapping — administration of users is much more simple and much less
time consuming. For details, see the Administrator’s Guide for older versions of Kerio
WinRoute Firewall (versions 6.7.0 or lower).
Selection of a domain server
In the default configuration, Kerio Control automatically detects domain servers for the
specified domain and uses the first detected server for connection to the Active Directory.
Automatic detection simplifies configuration significantly (it is not necessary to specify
IP addresses of individual domain servers).
If necessary, you can specify name of IP address of a specific domain server. In such
case, Kerio Control will not perform automatic detection and will always connect to the
specified server only.
232