Create User for LDAP Sync 1

[OregonSteve]

Greetings-

I need to create a user in AD that I can use to sync account info via LDAP. I know that using administrator is not wise...so I want to make one with the least permissions possible. Any help?

Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka

 

[NetIntruder]

Sync account info with what? To an external database?

If you are not writing to AD, then you need only have access to read account info. If you are writing attributes in to AD, you will need either delegated rights or Account Operator.

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[OregonSteve]

Greetings-

Yes, sync to an external database, read-only. Can you tell me the permission name(s)?

Read All Properties?
Read cn Name?

???

Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka

 

[NetIntruder]

It depends on what you are trying to replicate, but if you are looking for the simple "general" tab-type info (such as First Name, Last Name, Email address, etc), then the "Read General Information" is sufficient. Do you have a list of attributes you are trying to pull?

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[OregonSteve]

Greetings-

I may be having visual acuity issues, but I'm not seeing the "Read General Information" permission. I see "Read All Properties" and a lot of other more specific ones...

Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka

 

[NetIntruder]

Go to advanced on the security tab and you will get options at that point for "This object Only", "all child objects..." , etc, etc,... and "User Objects". This property is a member of "User Objects" Assign the permissions there.

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[OregonSteve]

BINGO!!!

Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka