After you add your Active Directory sync profiles, you can edit the settings for any sync profile. In ServiceDesk, you can change the sync profile settings to target a different organizational unit or group on the Active Directory server. You can map a different Active Directory field to a Process Manager field.
In the Process Manager portal, click Admin > Active Directory > Sync Profiles.
On the Active Directory Sync Profiles page, at the far right of the specific sync profile name, click the Actions symbol (orange lightning), and click Edit AD Sync Profile.
In the Edit Active Directory Sync Profiles dialog box, you can edit the following information:
AD Sync Profile Name
Lets you specify a name for the sync profile.
Lets you choose which Active Directory server connection you want the sync profile to target.
AD Server Email Domain
Lets you specify an email address for the users that you obtain from Active Directory. Use the following format:
ServiceDesk requires that all users have an email address, but Active Directory does not. This domain is appended to the user name of any user who does not have an email address.
Auto Create User On Initial Login
Lets you have a ServiceDesk user account created automatically when a new user logs on.
A new user who logs on to ServiceDesk is authenticated against the Process Manager database. If the user does not have an account there, and this check box is checked, the user is authenticated against Active Directory. If the user has an Active Directory account, a mirror account is created in the Process Manager database.
AD Users Default Groups
Lets you select the group to which users are added when their accounts are created automatically.
The All Users group is the most typical selection.
This option is available when you check Auto Create User on Initial Login.
When you are finished, click Next.
Note that if you do not enter the critical information or a connection cannot be made, a warning is displayed and you cannot proceed.
In the Edit Active Directory Sync Profile dialog box under Synchronization Option, you can select a different target for the synchronization. If the target of your synchronizations has changed, select one the following options:
Synchronizes ServiceDesk with your entire Active Directory.
Synchronizes ServiceDesk with one or more Active Directory organizational units, which you select from the tree view that appears in this dialog box. The tree view displays the organization units that are defined in the specified Active Directory.
Synchronizes ServiceDesk with one or more Active Directory groups, which you select from the tree view that appears in this dialog box. The tree view displays the groups that are defined in the specified Active Directory.
Specify LDAP Queries
Synchronizes ServiceDesk to a specific LDAP Query.
When you are finished, click Next.
In the Edit Active Directory Field Mapping dialog box, you can edit which fields in Active Directory you want to map to which fields in Process Manager.
Note that normally you do not need to change any field mapping settings. Symantec recommends that you do not change key fields mapping, such as Primary Email Id (Email address), first names, and last names.
When you are finished, select one of the following options:
If you do not want to edit the sync profile schedules, click Save. The dialog box closes, your changes are saved, and you are finished.
If you want to edit the sync profile schedules, click Next. Go to step 9.
Note that editing a sync profile schedule means selecting or adding a different schedule. If you want to edit the sync profile schedule, you must edit it from the Active Directory Sync Profiles Schedule page.