Manage Deployed AD Components

The Cisco Active Directory (AD) Connector integrates Cisco Secure Access with your instance of Microsoft AD. After you add AD components—AD domain controllers and AD domains—and integrate AD Connectors in your environment, you can manage these AD components in Secure Access.

This guide describes how to view and manage your deployed AD components.

Table of Contents

• Prerequisites
• Procedure

Prerequisites

• Full Admin user role. For more information, see Manage Accounts.
• For information about the requirements for deploying the Cisco AD Connector, see Prerequisites for AD Connector.

Procedure

View the AD components that are deployed in your on-premises environments, manage a Site for an AD component, and remove an AD component.

• View Deployed AD Components in Secure Access
• Edit a Site
• Delete AD Component

View Deployed AD Components in Secure Access

Note: If the AD Connector does not appear in Secure Access and you have met the network requirements, check that the AD Connector server is not missing the DigiCert CA. If a certificate error is presented, download and install the latest DigiCert Global Root CA from DigiCert and restart the Cisco Active Directory Service. If it does not appear, contact Cisco Secure Access Support.

1. Navigate to Connect > Users and User Groups, click Configuration management, and then expand Active Directory.

   

2. For Active Directory components, view the installed AD components.

   • Name—The hostname of the Windows computer where you installed the AD Component.

   • Internal IP—The internal IP address of the AD component.

   • Site—The unique label that identifies the Site associated with the AD component.

   • Type—The type of AD component, either Domain Controller, Domain, or AD Connector.

   • Status—The state of the AD component.

   • Version—The version of the AD component.

     

Edit a Site

1. Navigate to Connect > Users and User Groups, click Configuration management, and then expand Active Directory.

2. For Active Directory components, locate an installed AD component, and then click the ellipsis (...).

3. Click Edit Site.

   

4. Choose a Site for the AD component, and then click Save.

   

Delete AD Component

1. Navigate to Connect > Users and User Groups, click Configuration management, and then expand Active Directory.

2. For Active Directory components, locate an installed AD component, and then click the ellipsis (...).

3. Click Delete, and then click Delete to confirm the removal of the AD component in Secure Access.

   

Configure Updates on AD Connectors < Manage Deployed AD Components > Multiple AD Domains with Secure Access Sites