EDS/BTLS (NetSweeper) Moving from AD to Azure AD filtering

[ITJAY2023]

Hi All,

 

Has anyone had experienced with EDS/BTLS transferring the NetSweepers security groups from Active Directory searching to Azure Active Directory Security Groups?

 

Our schools are looking to go serverless and fully move all data to the cloud so this is a necessary step.

[Patrick]

Hi, Shamless bump on this, but I'm currently researching this and wondered if you had any success with this?

[ITJAY2023]

Hi Patrick,

 

Yeah I did it was really simple in all honesty.

 

The netsweeper agent has to be changed in order to look at Azure Security groups instead of Active Directory

 

https://helpdesk.netsweeper.com/docs/6.4/index.htm#t=Directory_Sync_Docs%2FAzure_Directory_Sync%2FAzure_Directory_Sync.htm&rhsearch=azure%20active%20directory&rhhlterm=azure%20active%20directory&rhsyns=%20

 

You also need to register a application ID for netswepeer on Azure as well.

 

The guide is simple to follow.

 

So the prefix was used was NS_

 

The agent then looks at Azure Mail Enabled Security Groups for NS_***** and applies the group

 

Just give us a shout if you need a hand as Netsweeper support was a bit flakey

[Patrick]

That's great, thank you for that! Looking at going serverless, did you take back global admin from BTLS when doing your project? Thinking I'll have to.

[ITJAY2023]

Yeah you'll need global admin, just get the head to raise a service request and say your taking over third party support for 365

[jtotheb]

Hi Patrick,

 

Yeah I did it was really simple in all honesty.

 

The netsweeper agent has to be changed in order to look at Azure Security groups instead of Active Directory

 

https://helpdesk.netsweeper.com/docs/6.4/index.htm#t=Directory_Sync_Docs%2FAzure_Directory_Sync%2FAzure_Directory_Sync.htm&rhsearch=azure%20active%20directory&rhhlterm=azure%20active%20directory&rhsyns=%20

 

You also need to register a application ID for netswepeer on Azure as well.

 

The guide is simple to follow....

 

Hi there, sorry to jump in but once you had registered the application ID in Azure did you have to use a global admin in "add the search base" section?

 

We're being asked to do this, but that seems very odd given that the app has been delegated the permissions to read the directory.

[ITJAY2023]

Hi there, sorry to jump in but once you had registered the application ID in Azure did you have to use a global admin in "add the search base" section?

[ATTACH=CONFIG]69464[/ATTACH]

 

We're being asked to do this, but that seems very odd given that the app has been delegated the permissions to read the directory.

 

 

Hey,

 

Yeah we used the global admin details in the "add the search base" section.

 

Sorry for the delay!