To edit the settings of an Active Directory domain:
- Select the domain in the Configured Active Directory Domains pane.
-
Select Edit Domain Settings from the right-click menu.
The Edit Domain Settings dialog box is displayed.
Note:The Domain name cannot be changed once it is added. To change the name of a domain, it must be removed then added as a new domain. See Removing an Active Directory Domain.
-
Select Enabled to include this domain in authentication. If Enabled is deselected, the domain is not used to authenticate against.
Disabled domains are visually represented in the Configured Active Directory Domains pane by a dark screen on the icon, as shown beside A in the following illustration. B represents an enabled domain.
-
Select Alternate Binding Credentials to specify the user account against which the security context for the domain should be resolved. If this option is deselected, the security context of the user currently logged in to Windows, or of the impersonation account when OnBase is being accessed using the OnBase application server, is used to resolve the groups within the domain.
Tip:
It is a best practice to deselect the Alternate Binding Credentials option and use the default account to obtain the security context.
- Select Resolve Group Foreign Security Principals to allow authentication for groups in trusted foreign domains that are mapped to OnBase groups. If this option is deselected, groups that are part of a foreign trusted domain are not included when authenticating a user against the domain.
- Select Use SSL When Available to use an HTTPS binding between the client and the server. The server must be configured to support HTTPS bindings.
- Click Save.
- Click Apply to save the configuration changes and continue working in the Active Directory - Enhanced dialog box, or click OK to save the configuration changes and close the Active Directory - Enhanced dialog box.