Active Directory Objects
Use these pages to specify the users, computers, groups, and organizational units you want Workspace Environment Management (WEM) to manage.
Note:
Add users, computers, groups, and OUs to WEM so that the agent can manage them.
Users
A list of your existing users and groups. You can use Find to filter the list by name or ID against a text string.
To add a user
- Select Add from the context menu.
- Enter a user or group name in the Windows Select Users dialog, then click OK.
Name. The name of the user or group.
Description. Only shown in the Edit Item dialog. Lets you specify additional information about the user or group.
Item Priority. Lets you configure priority between different groups and user accounts. The priority determines the order in which the actions that you assign are processed. Type an integer to specify a priority. The greater the value, the higher the priority. If there is a conflict (for example, when mapping different network drives with the same drive letter), the group or user account with the higher priority prevails.
Important:
When assigning Group Policy settings, the priority you configure here does not work. To set the priority for them, use Administration console > Assignments. For more information, see Contextualize Group Policy settings.
Item State. Lets you choose whether a user or group is enabled or disabled. If disabled, you cannot assign actions to it.
To add multiple users
- Select Add from the context menu.
- Add multiple users or group names in the textbox, separate them with semicolons, and then click OK.
Machines
A list of computers which have been added to the current site (configuration set). Only computers listed here are managed by Workspace Environment Management. When agents on these computers register with the infrastructure server it sends them the necessary machine-dependent settings for the configuration set. You can use Find to filter the list by name or ID against a text string.
Tip:
To check whether agents on these machines are correctly registered with the infrastructure server, see Agents in the Administration section.
To add a computer or computer group to the current configuration set
- Use the Add Object context menu command or button.
- In the Select Computers or Groups dialog, select a computer or computer group, then click OK.
To add computers in an organizational unit to the configuration set
- Use the Add OU context menu command or button.
- In the Organizational Units dialog, select an organizational unit, then click OK.
To edit computer, computer group, or OU details
- Select an item in the list.
- Use the Edit context menu command or button.
- In the Edit item dialog, any of the following details (which are not read-only), then click OK.
Name*. The computer, computer group, or OU name.
Distinguished Name*. The distinguished name (DN) of the selected computer or computer group. This field allows you to differentiate different OUs if they have the same Name.
Description. Additional information about the computer, computer group, or OU.
Type*. The selected type (Computer, Group, or Organizational Unit)
Item State. The state of the computer, computer group, or OU (enabled or disabled). If disabled, the computer, computer group, or OU is not available to assign actions to.
Item Priority. This allows you to configure priority between different groups and user accounts. The priority determines the order in which the actions you assign are processed. The greater the value, the higher the priority. Type an integer. If there is a conflict (for example, when mapping different network drives with the same drive letter), the group or user account with the higher priority prevails.
* Read-only details reported from Active Directory.
Advanced
Active Directory search timeout
Configure Active Directory behavior.
- Active Directory search timeout. Specify the timeout, in milliseconds, after which Active Directory searches end. The default value is 1000. We recommend using a value equal to or greater than 500 to avoid timeouts before searches complete.
Unbound agent site settings
Control whether to apply settings to unbound agents. Unbound agents are those agents that are not bound to any configuration set.
The following setting applies to your entire WEM deployment. It is not associated with any configuration sets (sites). After you enable the setting, go to the “Unbound Agents” configuration set and then configure settings there so that you can control how unbound agents behave.
- Apply settings to unbound agents. Lets you apply the settings of the “Unbound Agents” configuration set to agents that you have not yet added in Active Directory Objects.