Kerio Active Directory Extensions
Table of Contents
15.1. Установка Active Directory Extensions
15.3. Определение учетных записей пользователей
Active Directory Extensions is an extension to the Active Directory service (under Windows 2000 and newer versions) with items that include specific information for Kerio MailServer. By installation of the extension you can integrate part of Kerio MailServer into Active Directory. This will simplify actions related to user administration.
Kerio Active Directory Extensions provides the following benefits:
- Easy account administration
- As of version 5.5, Kerio MailServer can (apart from its internal user account database) use also accounts and groups saved in the LDAP database (in Microsoft Active Directory). Using LDAP, user accounts can be managed from one location. This reduces possible errors and simplifies administration.
- Online cooperation of Kerio MailServer with Microsoft Active Directory
- Additions, modifications or removals of user accounts/groups in the Microsoft Active Directory database are applied to Kerio MailServer immediately.
Example: A company uses the Windows 2000 domain and Kerio MailServer. A new employee was introduced to the company. This is what has been done until now:
-
A new account has been created in Active Directory.
-
The user has been imported to Kerio MailServer (or an account using the same name has been created and this name was verified by the Kerberos system).
If you use LDAP database only the first step must be taken. If Kerio Active Directory Extensions is deployed, the dialog where new user accounts can be created is extended with a tab where specific information for Kerio MailServer can be entered (email addresses, forwarding, quota, etc.).
The account is created only in the Active Directory database. Kerio MailServer and Microsoft Active Directory cooperate online. Accounts in Kerio MailServer are created automatically.
Warning 1: Accounts created in Kerio Administration Console will be created only locally such accounts will not be copied into the Active Directory database.
Warning 2: If the Active Directory server is not available it will not be possible to access Kerio MailServer. For such cases we recommend you to create at least one local administrative account with full rights.
