https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-AD-Username/m-p/155016#M26363 <P>Hi Friends,</P><P>&nbsp;</P><P>I previously had identity awareness configured and working nicely until my AD Admin said to me the account I used to connect to AD has way too much domain rights. They then gave me an account with lower domain privileges, now my identity awareness is broken.</P><P>&nbsp;</P><P>What AD level access username\account do I need to use to connect the gateway to AD in order to retrieve AD related information to use Identity awareness to the fullest?</P><P>&nbsp;</P><P>In essence, my AD team is very concerned of giving me an account with admin rights to the domain. Any other level user account I use, I get the following error message "user is not a domain administrator, as such AD Query will not work. Click the back and choose another identification method."</P><P>&nbsp;</P><P>The attached is a screenshot of the error message.</P><P>&nbsp;</P><P>Please help...</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 15 Aug 2022 21:55:30 GMT Realeboga_Mashi 2022-08-15T21:55:30Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-AD-Username/m-p/155016#M26363 <P>Hi Friends,</P><P>&nbsp;</P><P>I previously had identity awareness configured and working nicely until my AD Admin said to me the account I used to connect to AD has way too much domain rights. They then gave me an account with lower domain privileges, now my identity awareness is broken.</P><P>&nbsp;</P><P>What AD level access username\account do I need to use to connect the gateway to AD in order to retrieve AD related information to use Identity awareness to the fullest?</P><P>&nbsp;</P><P>In essence, my AD team is very concerned of giving me an account with admin rights to the domain. Any other level user account I use, I get the following error message "user is not a domain administrator, as such AD Query will not work. Click the back and choose another identification method."</P><P>&nbsp;</P><P>The attached is a screenshot of the error message.</P><P>&nbsp;</P><P>Please help...</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 15 Aug 2022 21:55:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-AD-Username/m-p/155016#M26363 Realeboga_Mashi 2022-08-15T21:55:30Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-AD-Username/m-p/155018#M26364 <P>There are SK articles such as&nbsp;<SPAN>sk104900 that describes configuration using non administrator rights.</SPAN></P> <P><SPAN>With that said I would encourage you to investigate the Identity Collector (sk108235) further as an alternative to ADQuery moving forward.</SPAN></P> Tue, 16 Aug 2022 11:24:18 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Identity-Awareness-AD-Username/m-p/155018#M26364 Chris_Atkinson 2022-08-16T11:24:18Z