topic Re: R80.10 Identity Awareness in Firewall and Security Management

R80.10 Identity Awareness

Network_Engine2 — Tue, 09 Apr 2019 08:37:23 GMT

Hi,

i'm looking to activate Identity Awareness in my R80.10 environment, and i saw that the user of the AD that i need to supply in order for it to work needs to be "Domain Admin". my question is if it really *has* to be domain admin or it can have lower permissions, because i cant give domain admin unfortunately.

Re: R80.10 Identity Awareness

G_W_Albrecht — Tue, 09 Apr 2019 08:46:10 GMT

Have a look here:sk93938: Using Identity Awareness AD Query without Active Directory Administrator privileges on Windows Server 2008 and above or here: sk43874 - Using Identity Awareness AD Query without Active Directory Administrator privileges on Windows Server 2003 and lower.

Re: R80.10 Identity Awareness

Maarten_Sjouw — Tue, 09 Apr 2019 10:12:22 GMT

I can tell you from experience that, even though all settings were properly done according these SK's, we were still experiencing a lot of issues, some of the gateways worked fine others did not. Opened a case and everything was triple checked and still the problem did not change. Only after setting the user to full admin all these issues disappeared.