Exacq exacqVision Server/Client OS: Windows Active Directory User Manual - Manual

Windows Server & Client and Active Directory
www.e x acq.com
+1.317.845.5710
+44.1438.310163
USA (Corporate Headquarters)
Europe/Middle East/Asia
Page 1 of 9
1/24/2013
1
Introduction
For an organization using Active Directory (AD) for user management of information technology services, integrating exacqVision
into the AD infrastructure can greatly simplify continuing maintenance of user access to your video management system (VMS). On
each exacqVision Server, you can assign VMS permissions to one or more AD groups and users. However AD groups is the preferred
method for authentication. Then, as you add user accounts to those groups through standard IT user management practices, those
users will automatically have access to log in to the exacqVision Servers with appropriate permissions. User management directly
through exacqVision becomes a one-time configuration requiring that you join the server to the domain and assign permissions and
privileges to groups, and all additional user management occurs through AD.
To provide the ongoing benefits of using group-based permissions with exacqVision Server, the server must do more than simply
authenticate login credentials of a user requesting access; it must be able to browse AD groups to present them as configuration
options and to determine whether a user requesting access is a member of any configured groups.
Minimum Requirements
 Your exacqVision Server must have an Enterprise license to interact with AD.
 The domain controller must be running on Windows Server 2003 or later.

To configure AD on an exacqVision Server, you must have Active Directory credentials with access to the following AD
parameters:

objectClass (specifically "group" & "user")

userPrincipalName
 sAMAccountName
 inetOrgPerson
 krbPrincipalName