The Active Directory tab in the Options/Preferences section specifies the SMOP Service Account and the SMOP Administrative Group. These two configuration options are critical to the correct operation of SMOP.
This Active Directory account will be used to perform all SMOP access to Active Directory. This account will be used to query Active Directory for group membership, query Active Directory for users, and reset passwords.
The SMOP Service Account needs to have permissions to reset passwords and enable Active Directory accounts if they are disabled. The easiest way to configure this account is to make it a part of the Domain Admins group. However, membership in the local Administrators group for the domain or the Account Operators group will also be sufficient.
This account needs to have the proper rights across ALL Active Directory domains that SMOP will manage. Thus if you have multiple domains, you will need to ensure that the SMOP Service Account from the domain that you specify has the proper user rights in all the other domains you have chosen to manage in the "Options/Preferences - Domains" tab.
The name needs to be specified in the format DOMAIN\USERNAME.
For more information about changing the SMOP Service Account or password.
Password that corresponds to the SMOP Service Account.
This specifies the name of the Active Directory Group that will have access to the SMOP Administration Web pages. Specifying the group allows for the creation of a custom group specifically for SMOP administration. However, you may use the default Administrators or Domain Admins group. The default setting is the Administrators group.
Note: This group is a domain level group and not a local group on the SMOP server. Thus, by default the group is "Administrators", which refers to the Administrators local group in the Active Directory domain.
When entering the SMOP Administrator, the username that you use to login should be a part of the Admin Group specified here. If the user account you use to log in is not a member of the Admin Group, you will not be able to get into any of the SMOP Administration pages and not be able to change any settings.
Thus, it is critical that this group is specified correctly during SMOP setup or you will be locked out of SMOP!