# Active Directory Users

Deep Freeze Cloud provides the ability to add users directly from your Active Directory. The first step is to integrate Deep Freeze Cloud with your Active Directory domain.

#### Active Directory Integration

Complete the following steps for Active Directory (AD) Integration:

1. Go to _User Management_.
2. Click _AD Integration_.
3. Click _Add Domain_.
4. Click _Download AD Authenticator_.
5. Double-click _Faronics AD Authenticator.exe_ to run the installer.
6. Accept the License Agreement.
7. Click _Install_.
8. Click _Finish_.

Once the AD Authenticator is installed, the domain is shown on the _AD Integration_ page.

{% hint style="info" %}
* Faronics AD Authenticator must be installed on a computer that is connected to the domain.
* Faronics AD Authenticator keeps the connection alive between the computer where it is installed and Deep Freeze Cloud.
* The computer where the Faronics AD A&#x75;_&#x74;henticator is i&#x6E;_&#x73;talled must always be on for Deep Freeze Cloud to connect to the Active Directory.
{% endhint %}

#### Add Active Directory Users

Complete the following steps to add Active Directory users:

1. Select _User Management_.
2. Click _Add User > Add AD Users_.
3. In the Add Users dialog, select the _Domain_. Enter the user name in the search box and click _Search_.
4. Select the user and click _Next_.
5. Configure the permission for the user:
   * Super Administrator
   * Administrator
   * Reporting Administrator
   * Deep Freeze Limited Administrator
6. Select the Site.
7. Specify the tags.
8. Click _Next_.
9. Click _Add Users_.

{% hint style="info" %}
When an Active Directory user logs on to Deep Freeze Cloud, they must enter the user name, password and Domain Identifier. The Domain Identifier is sent to the user via email once the account is created in Deep Freeze Cloud.
{% endhint %}

{% hint style="info" %}
It is the administrator’s responsibility to delete a user from the Windows Active Directory when the user is not working in your organization. &#x20;
{% endhint %}

#### Add Active Directory Group / Organizational Unit

Adding an Active Directory Group / Organizational Unit gives the flexibility to assign permissions directly to a group of users. Different user groups can be assigned different permissions as per your requirement.

Complete the following steps to add Active Directory groups/ Organizational Units:

1. Select _User Management._
2. Click _Add User > Add AD Groups / OU_.
3.  In the Add Groups dialog, select the _Domain_. Enter the name of the group in the search box and click _Search_.



    {% hint style="info" %}
    The Organizational Unit on this dialog represents a group of users.&#x20;
    {% endhint %}
4. Select the group and click _Next_.
5. Configure the permission for the group:
   * Super Administrator
   * Administrator
   * Reporting Administrator
   * Deep Freeze Limited Administrator
6. Select the Site.
7. Specify the tags.
8. Click _Next_.
9. Click _Add Group_.

{% hint style="info" %}
* When a user belonging to an Active Directory Group logs on for the first time, the user is created in Deep Freeze Cloud.
* An Active Directory user belonging to a particular group inherits the permission of the group. The Inherit AD Group permissions and sites settings checkbox is automatically selected. If this checkbox is cleared manually, the user will not inherit Active Directory group permissions. The user will then be converted to a individual Active Directory user.
* If the Active Directory user is part of two groups with higher and lower permission, the user will inherit the lower permissions.
* An Active Directory user belonging to multiple groups will be able to access the Deep Freeze Cloud Sites belonging to the group with lower permission.
{% endhint %}
