Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Protection: What are the recommended steps to migrate Active Directory groups while Active Directory mapping is enabled?

CB Protection: What are the recommended steps to migrate Active Directory groups while Active Directory mapping is enabled?

Environment

  • CB Protection Server: 7.x and Higher
  • Microsoft Active Directory

Question

What are the recommended steps to migrate AD groups while AD mapping is enabled?

Answer

  1. Schedule a time to have a Protection admin and the AD admin work together during the migration. 
  2. Create a new group(s) (not moving the existing ones) into the desired location in AD. 
  3. Add the desired users to the new group location. 
  4. Have the Protection admin modify the role mapping to the new AD group. 
  5. Verify the users can log in with the new mapping. 
  6. Delete the old AD group.

Additional Notes

  • Simply moving the AD groups into another area in the domain (different or nested OU) can cause issues with the console and console access.
  • Having both a Protection and Active Directory admin on hand and working together can help limit downtime in the event of an issue as changes can be undone quicker.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-15-2019
Views:
269
Contributors