Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Archive > 2017July12 - Dameware > Manage users > Import users

Import users

Created by Anthony.Rinaldi_ret, last modified by Anthony.Rinaldi_ret on Jul 12, 2016

Views: 65 Votes: 0 Revisions: 4

You can import users directly from Active Directory or from a CSV file. For information about importing a host list from AD, see Importing to the Global Host List.

Active Directory Environment Requirements

Note: External links in this section were verified as of March 2015.

Mandatory Requirements

  • DameWare Mobile Client, Mini Remote Control and Exporter must be installed on domain workstation, and run under domain user
  • DameWare Central Server must be installed on domain workstation
  • NTLM/NTLMv2 traffic and Kerberos authentication should not be disabled
  • You must synchronize domain users into DameWare Central Server

NTLM/NTLMv2

Windows uses NTLM or NTLMv2 protocols by default. You should not disable this protocol in local policy or group policy. If disabled, see the Microsoft article, How to enable NTLM 2 authentication at the Microsoft support website.

If you are required to use NTLMv2 instead of NTLM, specify this options on all PC on which you want to use DameWare products.

Kerberos

Kerberos must be enabled on the Active Directory server. On most systems no additional configuration should be required. However, if required, the Microsoft TechNet web site has the following articles that may be useful:

Multi-domain authentication

Multi-domain authentication should work for trusted domains in one forest. When using transitive trust between domains in a forest, the Kerberos service searches for a trust path between the domains to create a cross-domain referral. In large trees it might be more efficient to establish cross-links of bidirectional trusts between domains where there is a high degree of cross-domain interaction. This permits faster authentication by giving the Kerberos protocol "shortcuts" to follow when generating the referral message. Kerberos authentication uses transparent transitive trust among domains in a forest.

Kerberos cannot authenticate between domains in separate forests. To use a resource in a separate forest, the user has to provide credentials that are valid for logging on to a domain in that forest. Alternatively, if a one-way trust relationship exists, applications will use NTLM authentication, if the security policy permits. This scenario, however, is not supported.

Note: Single Sign-On cannot be used outside the Domain environment.

Additional information on these topics can be found at these external sites:

Active Directory Import

You can import users from Active Directory as Central Server users. This functionality is not available for DameWare Mobile Gateway users.

Note:Importing from AD can take up to an hour depending on how large the imported groups are.

To import users from AD:

  1. Navigate to Central Server > Users.
  2. Click AD User Import. The Active Directory Import Wizard is displayed.
  3. Select the import type:
    • To enable users to log in to the central server with DameWare credentials, select One-time import, and click Next.
      Note: Users imported using this method will be standard DameWare users. They will not be able to use Windows authentication.
    • To enable users to log in to the central server with their Windows credentials, select Synchronized Import, and click Next.
      Note: This method sets up automatic synchronization with Active Directory for users in the selected groups.
  4. Select the domain to import from:
    • To import users from Active Directory groups on the local domain, select Local Domain.
    • To import groups from a custom domain controller:
      1. Select Custom domain controller
      2. Enter the IP address or the FQDN of the domain controller
      3. Enter the Username and Password for a user account with read only or administrative access to Active Directory
      4. Enter the Port number of the Active Directory server. The default port number is 389 for LDAP or 636 for LDAPS servers
      5. If you are connecting to a LDAPS server, you can create an encrypted connection by checking the Use SSL box
  5. Click Next.
  6. To filter the list of available active directory groups, enter all or part of the group name in the field beneath the list.
  7. Select the groups to import, and click Next.
  8. For each group, select the license type from the dropdown list. This can be either Mini Remote Control or Remote Support. The number of available licenses for each product is displayed.
  9. If you are performing a one-time import, enter the default password for all users in these groups.
    Note: Users are prompted to change this password when they first connect to the server.
  10. If you are setting up a schedule:
    1. Enter a Connection Name for this schedule
    2. To schedule synchronization at a specific time on a specific day:
      1. Select the first Every button
      2. Check the boxes for the days on which you want to synchronize with Active Directory
      3. Select the time for the synchronization on each selected day
    3. To schedule synchronization at specified intervals:
      1. Select the second Every button
      2. Enter the number of hours between imports
  11. Click Add.

AD Manager

The Active Directory Synchronization Manager enables you to add, edit, delete and run Active Directory synchronization tasks.

  1. Navigate to Central Server > Users.
  2. Click AD Manager.
    • To add a new synchronized task, click Add. The Active Directory Import Wizard is displayed. Proceed from step 4 above.
    • To edit an existing Active Directory Synchronization Task, select the task and click Edit. The Active Directory Import Wizard is displayed. Proceed from step 4 above, amending the task details as required.
    • To delete a synchronization task, select the task and click Delete.
    • To run a synchronization task immediately, select the tasks and click Synchronize or click Synchronize All to synchronize all tasks.

CSV Import

DameWare provides a template to indicate how the data should be formatted in your CSV file.

To download the template:

  1. Navigate to Central Server > Users or to Gateway > Users.
  2. On the actions toolbar, click CSV Import.
  3. Click Download template file.
  4. Save the file to your computer or other device.

Note: You must keep the header from the template.

To import users:

  1. Navigate to Central Server > Users or to Gateway > Users.
  2. On the actions toolbar, click CSV Import.
  3. Click Browse and select the CSV file.
  4. In the Password field, enter a default password for all imported users.
  5. Click Import.

If you encounter errors during the import, check the following:

  • Are the fields the correct length?
    • Login Name and Full Name must be between five and 126 characters long.
    • The password must be eight characters long or more.
    • The description must be 256 characters or less.
  • Is the header the same as the template?
  • Have you deviated from the template format?
Last modified
15:43, 12 Jul 2016

Tags

Classifications

Public