Active Directory integration works by associating specific Active Directory groups with specific Vista user groups.
When a corporate staff member logs on to a Vista system using their domain user name and password, the Vista system contacts Active Directory to authenticate the staff member. The Vista system then uses a predefined map to associate the corporate staff member with a Vista user group, and automatically creates a local Vista account for that member.
The association between a Vista user group and an Active Directory group is based on the Active Directory group's underlying security identifier (SID). This association means that the names of the Active Directory groups can be changed without disrupting their relationship to Vista user groups.
The Active Directory - User Group Mapping form allows you to set up this mapping.
When a corporate staff member belongs to multiple Active Directory groups, the priority value determines which Active Directory group is used to associate the user with a corporate Vista group.
Lower values indicate a higher priority.
|Domain||any Active Directory domain||The authenticating domain to which the Active Directory groups belong.|
|Active Directory Group||any Active Directory group||The Active Directory group, containing corporate staff members with similar roles and authority, whose members may log on to your organisation's system using their domain user name and password.|
|Vista User Group||any user group||The user group that defines the permissions that corporate staff in the given Active Directory group have, when they log into the Vista system with their Windows username and password.|
|This option enables corporate staff in the Active Directory group to log on to CashDesk.|