ConnectWise Automate (formerly LabTech) provides the ability to link your Automate server to your internal Active Directory for managing Automate users (Technicians) accounts. Using this functionality simplifies account management and ensures that passwords change according to company policy. There are a couple requirements for this to work properly. First, the Automate Server must be part of the domain you are trying to join it to. Next, log into the Automate Server with a Domain Administrator account. If you meet these two requirements, log into the Control Center from the Automate Server and navigate to Dashboard > Config > VNC / Ticket Priority.
In this window, you will see the settings for configuring the Active Directory Integration LDAP Account Sync on the top right-hand side. Perform the following steps:
- Check “Enabled LDAP Account Sync”
- Click the “Get LDAP Config” button to auto populate the above text boxes. If they do not fill in, you may have to enter the connection details manually.
- Click “Create AD Groups”. This will create a group on your Domain Controller for each available Automate Security class.
- Click “Save”
At this point, log onto your Domain Controller to verify that the security groups were successfully created. For user accounts in Automate and Active Directory to successfully sync, the usernames must match exactly in both systems. Adding any Domain users to the created security groups will overwrite their permissions in the Automate Control Center with the permissions assigned to those groups when they log in. If do not assign a user to any groups and they have an existing login on the Automate server, only their password will sync and they will retain their existing user permissions.
By properly configuring Active Directory Integration, you can streamline account management and ensure consistent user permissions across both systems.
