Active Directory prerequisites

  • Active Directory server with users and groups configured.

  • Active Directory can be configured with IP Servers that use a localized, independent, database for each server or within a shared database environment.

  • Administrator user account with administrator-level credentials in both the domain and on the Active Directory server (do not use an individual account).

Alternatively, an account created with read/write permissions for Active Directory integration would be appropriate if the local Administrator account is used to install and modify IP Server during the initial setup process.

This allows modifying the registry of the IP Server, granting other Active Directory user scopes and security objects the necessary permissions for accessing video storage in both read/write modes.

  • The IP Server host is part of the Domain.

  • IP Server must be able to communicate with all domain controllers via port 389 or 636. Port 389 cannot be modified. Port 636 is used for SSL encryption.

  • IP Server configuration must be done while logged into the domain with a valid domain account.


Video Insight recommends importing users as a group instead of adding users individually. The group must be created in Active Directory prior to import. Customizing Groups to suit the individual needs and policies of the organization installing IP Server is done easily.

To configure the IP Video Enterprise service to run as an Active Directory account:

  • Click the Start button.

  • Enter services.msc and then press Enter.

  • Locate the IP Video Enterprise service.

  • Right-click and select Stop.

  • Right-click and select Properties.

  • Select the Logon tab.

  • Select the second option for the account.

  • Provide an Active Directory account with minimal rights. A basic domain user account should be sufficient.

  • Click the General tab and then select Start.

  • Click OK.

Restart the IIS Admin service if using Web Client.

 

Â