Inquiry for Active Directory about SPP

Hi Jaeil,

Are you trying to add multiple AD Assets for password management purposes or is this for Identity and authentication AD providers (User login into SPP)?

Do these Active Directory domains belong to the same forest or separate forests?

SPP can manage a single forest with multiple AD domains under a single Active Directory Asset or a single Identity and authentication provider rather than having to add multiple objects for each domain fyi.

You would only be required to add multiple AD assets or providers if these are separate forests.

Thanks!

Hi Tawfiq,

Thank you for your answer. You are about to add on AD asset for password management purposes.

When you add it, the message that the domain controller cannot be found is confirmed.

Different AD assets have different domain and network addresses.

Please advcie.

Kind Regards,

Jaeil.

Hi Jaeil,

There are multiple causes to get the error No reachable 'Domain Controller' servers found

1. Check if DNS Server defined in SPP (also make sure that Replicas have the DNS configured if this is a cluster) can resolve the FQDN domain name

2. if using the option Use SSL (depending on which version of SPP older version did not have this option) then you have to define network address as Hostname rather than IP address

3. If you wish to test with IP address then you can add a Domain Controller IP address in the Domain Controller field.

4. If these separate domains belong to the same forest then you should add one Active Directory Asset per forest and you can still define multiple domain controller IPs if required in the Domain Controller field that way it will not use the DNS and only connect to the DC specified instead. Otherwise, if DCs are not specified then it depends on DNS and will try to connect to all DCs in all domains that belong in that forest.

Thanks! 

Hi Jaeil,

There are multiple causes to get the error No reachable 'Domain Controller' servers found

1. Check if DNS Server defined in SPP (also make sure that Replicas have the DNS configured if this is a cluster) can resolve the FQDN domain name

2. if using the option Use SSL (depending on which version of SPP older version did not have this option) then you have to define network address as Hostname rather than IP address

3. If you wish to test with IP address then you can add a Domain Controller IP address in the Domain Controller field.

4. If these separate domains belong to the same forest then you should add one Active Directory Asset per forest and you can still define multiple domain controller IPs if required in the Domain Controller field that way it will not use the DNS and only connect to the DC specified instead. Otherwise, if DCs are not specified then it depends on DNS and will try to connect to all DCs in all domains that belong in that forest.

Thanks!