-
Posts
2,107 -
Joined
-
Last visited
Content Type
Forums
News
20th
EduGeek EDIT Conference
Blogs
Everything posted by Jaan
-
-
Hey all, Just wanted to ask you guys if you could help me clear the murky water that is AD read only permissions. Long story short, we have (had) adobe sync, sync users to their console for account and licenses allocation. This worked fine, but i discovered the AD account that performs this task (we'll call it A.dobe) had admin domain level access........ big nope from me. After reading Adobe's documentation it stats that a standard account should be fine as long as it has read only at base DN level. https://helpx.adobe.com/uk/enterprise/using/user-sync.html Armed with this new info, i removed the admin group membership and gave it group membership to just "domain users" It now doesn't work as its unable to see users in the AD groups...... Adding Admin group membership restores functionality, but there's no way that's happening moving forwards. I have raised a ticket with adobe here's their response; ---------------- Hello, In default LDAP settings, standard accounts should have read rights over the entire base_dn. Obviously the permissions are limited in your case and I would start looking into the permissions that the account is granted via its group(s) membership. Read-only mode for the entire base_dn is what the tool needs at minimum. If you want to do some tests with different accounts, please make sure '-t' argument is passed on to command line, next to user-sync.exe, or modify the 'test_mode: True' inside the user-sync-config.yml file, so you do not affect the users present in Admin Console. ---------------- Am i missing something here as i can't see the forest because the trees! Anybody else been through this? Cheers
-
they shouldn't be rushing you to return the hire car! its part of a on going claim..... esp if you were not at fault (not sure if that is the case in your senario). My bro got rear ended and he got a payout..... they wanted to car back and he said no, i haven't found a suitable replacment yet...... 3 months he had it (bmw 3 series)
-
I think he's going let it go "bankrupt" clean slate it and rebrand to compete with likes of "WEChat"........ or rather make a western equivalent to it.
-
cheers all
-
We're thinking of giving AMD Ryzen CPUs ago on our next classroom update. Anybody made the switch? any issues? i would have thought they're cheaper. Any thoughts or responses welcomed. Cheers
-
Where is Bromcom getting these "extra" roles from?
Jaan replied to lifeisshort's topic in MIS Systems
Sorry my fault for skipping a line for you post. Groups change to subject group? You can add and remove membership there. -
Where is Bromcom getting these "extra" roles from?
Jaan replied to lifeisshort's topic in MIS Systems
On the staff profile page under contracts -
-
I agree..... you were very unfair
-
-
this of any use? https://www.canva.com/design/DAEeee8wXTM/-Uxfa8j29Xy5dKm98wb92Q/view
-
Oh wow, it was 1 day for us
-
-
[ltsb, 1809] Anybody running 1809 LTSC on 11th and 12th INTEL Cpus
Jaan replied to Jaan's topic in Windows 10
Cheers guys..... I have a one of PC on its way...... its 12th gen so gives me a little push to update to the next LTSB..... -
[22h2] Explorer Tabs finally released on Windows 11
Jaan replied to supportman's topic in Windows 11
yeah its a game changer for me -
Casio camera or digital camera of some kind
-
oh no..... ours was a actual server with 50+ mount iso virtual drives I killed it with fire once i got the keys lol
-
We used to have a "CD-Server"
