Active Directory Users

Deep Freeze Cloud provides the ability to add users directly from your Active Directory. The first step is to integrate Deep Freeze Cloud with your Active Directory domain.

Active Directory Integration

Complete the following steps for Active Directory (AD) Integration:

1. Go to User Management.

2. Click AD Integration.

3. Click Add Domain.

4. Click Download AD Authenticator.

5. Double-click Faronics AD Authenticator.exe to run the installer.

6. Accept the License Agreement.

7. Click Install.

8. Click Finish.

Once the AD Authenticator is installed, the domain is shown on the AD Integration page.

• Faronics AD Authenticator must be installed on a computer that is connected to the domain.

• Faronics AD Authenticator keeps the connection alive between the computer where it is installed and Deep Freeze Cloud.

• The computer where the Faronics AD Authenticator is installed must always be on for Deep Freeze Cloud to connect to the Active Directory.

Add Active Directory Users

Complete the following steps to add Active Directory users:

1. Select User Management.

2. Click Add User > Add AD Users.

3. In the Add Users dialog, select the Domain. Enter the user name in the search box and click Search.

4. Select the user and click Next.

5. Configure the permission for the user:

   • Super Administrator

   • Administrator

   • Reporting Administrator

   • Deep Freeze Limited Administrator

6. Select the Site.

7. Specify the tags.

8. Click Next.

9. Click Add Users.

When an Active Directory user logs on to Deep Freeze Cloud, they must enter the user name, password and Domain Identifier. The Domain Identifier is sent to the user via email once the account is created in Deep Freeze Cloud.

It is the administrator’s responsibility to delete a user from the Windows Active Directory when the user is not working in your organization.

Add Active Directory Group / Organizational Unit

Adding an Active Directory Group / Organizational Unit gives the flexibility to assign permissions directly to a group of users. Different user groups can be assigned different permissions as per your requirement.

Complete the following steps to add Active Directory groups/ Organizational Units:

1. Select User Management.

2. Click Add User > Add AD Groups / OU.

3. In the Add Groups dialog, select the Domain. Enter the name of the group in the search box and click Search.

   The Organizational Unit on this dialog represents a group of users.

4. Select the group and click Next.

5. Configure the permission for the group:

   • Super Administrator

   • Administrator

   • Reporting Administrator

   • Deep Freeze Limited Administrator

6. Select the Site.

7. Specify the tags.

8. Click Next.

9. Click Add Group.

• When a user belonging to an Active Directory Group logs on for the first time, the user is created in Deep Freeze Cloud.

• An Active Directory user belonging to a particular group inherits the permission of the group. The Inherit AD Group permissions and sites settings checkbox is automatically selected. If this checkbox is cleared manually, the user will not inherit Active Directory group permissions. The user will then be converted to a individual Active Directory user.

• If the Active Directory user is part of two groups with higher and lower permission, the user will inherit the lower permissions.

• An Active Directory user belonging to multiple groups will be able to access the Deep Freeze Cloud Sites belonging to the group with lower permission.