R80.10 Identity Awareness

[Network_Engine2]

Hi,

i'm looking to activate Identity Awareness in my R80.10 environment, and i saw that the user of the AD that i need to supply in order for it to work needs to be "Domain Admin". my question is if it really *has* to be domain admin or it can have lower permissions, because i cant give domain admin unfortunately.  

[G_W_Albrecht]

Have a look here:sk93938: Using Identity Awareness AD Query without Active Directory Administrator privileges on Wind... or here: sk43874 - Using Identity Awareness AD Query without Active Directory Administrator privileges on Win...

[Maarten_Sjouw]

I can tell you from experience that, even though all settings were properly done according these SK's, we were still experiencing a lot of issues, some of the gateways worked fine others did not. Opened a case and everything was triple checked and still the problem did not change. Only after setting the user to full admin all these issues disappeared.