Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > LEM Administrator's Guide > Configure directory services (DS) groups in LEM

Configure directory services (DS) groups in LEM

Updated: September 15, 2017

This topic explains how to manage Active Directory groups for use with LEM rules and filters.

Complete the following tasks before you configure directory service groups for the first time:

  • Configure the Directory Service Query Connector
  • Sync Active Directory with LEM

See Configure Active Directory and LEM to work with LEM rules and filters for instructions.

About directory service (DS) groups

Active Directory groups that are configured to sync with LEM are called directory service groups (or DS groups). DS groups contain either Windows users or computer accounts. Any changes that you make in Active Directory propagate to LEM rules and filters.

If Active Directory is available, use directory service groups to add user and computer accounts to rules and filters. A user-defined group cannot be synchronized with Active Directory. Allowing LEM to access Active Directory directly via a directory service group means you do not have to maintain duplicate groups of user and computer records in LEM, saving time and reducing the risk of human error. Following integration, you can white-list or black-list select Active Directory groups using LEM rules and filters.

See About LEM groups to learn about the various group types that organize elements into logical units so that they can be used as parameters in rules and filters.

Create a directory service group and synchronize it with Active Directory

Complete these steps to select which Active Directory groups to synchronize with LEM. The synchronization process runs every five minutes as long as the connector is running.

Before you begin, the Directory Service Query connector must be configured on the LEM Manager.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. Click Build > Groups.

  3. Click button-plus(gray)_17x13.png in the upper right corner of the Groups toolbar and select Directory Service Group.

    The Select Directory Service Group form opens.

  4. Select from the list the LEM Manager that will use the DS groups.

  5. Use the folder tree on the left to populate the Available Groups pane on the right. The form displays the actual contents (folders and Group categories) of your directory service system.

    Each folder contains the group categories associated with that area of your directory service. You can maximize a folder to display the group categories within the folder.

    The Available Groups section lists a different set of group categories with each folder you select. For example, clicking the Users folder displays a different set of group categories compared to the Laptops folder.

  6. Select the directory service groups that you want to import into LEM Manager.
    File:Success_Center/Reusable_content_-_InfoDev/LEM/Log_and_Event_Manager_Administrator's_Guide/LEM_Administrator's_Guide/0590-Configure_directory_services_DS_groups_in_LEM/dsgroups1.png

  7. Repeat the previous two steps until you have selected all of the groups that you want to import.

  8. Click Save.

    The system synchronizes the DS groups to LEM and adds them to the Groups grid.

    You can now use the DS groups with your rules and filters.

View a directory service group member in the LEM console

The Groups grid displays various LEM groups, including each directory service group synchronized with LEM. Select a DS group in the grid to view the members of that group in the Directory Service Group pane.

  1. Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.

  2. Choose Build > Groups.

  3. In the Groups grid, select the directory service group you want to view.

    To sort groups by group type, click the Type column heading.

    The Directory Service Group pane lists the group members.

Directory service group grid columns

The Directory Service Group pane lists each computer account and user account associated with the DS group. The following table describes each grid column.

Column Description

Type

Displays an icon that shows if the group member is a user or a computer. The computer icon represents a computer account. The person icon represents a user account.

Name

The name of the group member.

Description

The description associated with the group member.

SAM Name

The account name of the member.

Principal Name

The principal name of the member.

Distinguish Name

The complete distinguished name of the member.

Email

The email address of the member.

Remove a directory service group from LEM

Directory service groups can be deleted from LEM the same as any other group. See Delete a group for steps. Deleting a DS group does not remove the group from Active Directory, however. You can restore a DS group at any time.

Last modified

Tags

Classifications

Public