Import User Groups from AD

Securden scans your Active Directory domain and obtains the users and groups in the domain. You can discover any specific user(s) or a group of users and add them to Securden. User discovery is a two-step process.

Step 1: Establish Connectivity

This step requires you to provide certain details to enable Securden to scan members of the domain.

Domain IP Address: Specify the FQDN or IP address of the domain controller to be scanned. You have the option to enter any number of secondary IP addresses (secondary domain controllers) in comma separated form. This will help Securden establish a connection if the primary is not accessible.

Connection Mode: Specify the mode (SSL/non-SSL) through which Securden has to establish a connection with the AD domain.

• If SSL mode is selected, the domain controller should be serving over SSL in port 636 and the certificate of the domain controller should have been signed by a CA.
• If the certificate of the domain controller is not signed by a certified CA, you need to import all the certificates that are present in the respective root certificate chain - that is the certificate of the domain controller and all the intermediate certificates if any.

You can follow the example given below to import the domain controller's certificate into the certificate store of the Securden server machine. However, you may use any procedure that you would normally use to import the SSL certificates to the machine's certificate store.

• In the Securden server machine, launch Internet Explorer and navigate to Tools >> Internet Options >> Content >> Certificates.
• In the GUI that pops up, click Install Certificate and then choose Local Machine in the next step.
• Browse and locate the root certificate issued by the CA.
• Click Next and choose the option Automatically select the certificate store based on the type of certificate and install.
• Click Import again.
• Browse and locate the domain controller certificate.
• Click Next and choose the option Automatically select the certificate store based on the type of certificate and install.
• Apply the changes and close the wizard.
• Repeat the procedure to install other certificates in the root chain.

Supply Administrator Credentials: You need to supply administrator credentials to enable Securden to scan the members in the domain. You may enter the username and password manually once and this will be stored in Securden for use during subsequent import attempts.

You can discover any group of users and add them to Securden.

Step 2: Go to Import

This step is to fetch the required user groups from the AD domain specified.

This GUI offers the flexibility to fetch user groups from OUs/Groups in bulk and even specific users, in a single step. That means, you can enter the names of the OU/Groups to be discovered in a single step. You can enter the discovery details in any combinations (OUs and Groups) as you wish.

1. To import OUs, select the OU tab.

2. Enter the OU name and select Discover.

3. You can also browse from the OU tree by clicking on the Browse OU Tree and Select option. You can select one or multiple OUs and select Add.

4. You can then verify your selection in the Verify the Objects Selected for Discovery.

5. You can then select the role for the OUs imported using the Role in Securden drop down. Note: Before selecting the import button, you can look into the additional settings which are explained below.

6. Select Import.

To import Groups, select the Groups tab.

1. Enter the Group name and select Discover.

2. You can also browse by clicking on the Browse Groups and Select option. You can select one or multiple groups and select Add.

3. You can then verify your selection in the Verify the Objects Selected for Discovery.

4. You can then select the role for the OUs imported using the Role in Securden drop down. Note: Before selecting the import button, you can look into the additional settings which are explained below.

5. Select Import.

Advanced settings:

This option allows you to either include domain users of all subgroups to the group being imported or ignore the subgroups and import only the users of the first level group.