Adconf - Revision history

WFilter at 07:28, 1 November 2023

2023-11-01T07:28:37Z

2020-10-10T07:06:48Z

2017-12-31T13:15:34Z

‎Logon/Logoff Script

2017-12-31T13:15:18Z

2017-12-31T11:29:40Z

2017-12-31T11:29:08Z

2017-03-17T07:49:44Z

2017-03-17T07:49:34Z

2016-09-09T05:54:14Z

2016-02-01T03:11:27Z

‎AD Intergration

@@ Line 14: / Line 14: @@
 == Settings  ==
-* Domain Controller: Domain Controller ip address.
+* Domain Controller: Domain Controller ip address(es)(comma-separated).
 * Port: port of your DC, 389 in default.
 * Domain Admin: domain admin user(The admin user shall belong to the "Domain Admins" group.)
 * Domain Name: domain dns name.
 * DC Location: where is your DC located?
 * Script Key: communication key for the adclient logon/logoff script.

@@ Line 24: / Line 24: @@
 ** User entry timeout, user will expire upon timeout.
 ** Sync domain users, automatically retrieve users from domain controller.
 [[File:Faq_en_adconf001.png|900px]]
 * Notice:

@@ Line 37: / Line 37: @@
 == Logon/Logoff Script ==
-AD does not record logon ip address for users. WFilter get AD users for clients in three ways:
+AD does not record logon ip address for users. So WFilter get AD users for clients in three ways:
 * Polling DC every 10 seconds when DC is in LAN network.
 * Monitoring logon packets to get usernames when DC is in WAN network.

← Older revision		Revision as of 13:15, 31 December 2017
Line 37:		Line 37:

	== Logon/Logoff Script ==		== Logon/Logoff Script ==
		+	AD does not record logon ip address for users. WFilter get AD users for clients in three ways:
		+	* Polling DC every 10 seconds when DC is in LAN network.
		+	* Monitoring logon packets to get usernames when DC is in WAN network.
		+	* Setup Logon/Logoff script in DC's group policy to get client usernames.
		+	Logon/Logoff script is most accurate, while polling DC can not detect logoff action of clients. So you're recommended to enable both.
		+
		+	=== Setup Logon/Logoff Script ===
		+
		+	* [[Media:adclient.zip\|Download adclient.exe]], uncompress and copy adclient.exe to Script/Logon and Script/Logoff directories in your domain controller.
		+
		+	[[File:adclient01_00.png\|600px]]
		+
		+	[[File:adclient01_01.png\|600px]]
		+
		+	* Add adclient.exe to domain's logon script:
		+
		+	[[File:adclient01.png\|600px]]
		+
		+	[[File:adclient02.png\|600px]]
		+
		+	Parameters: type(login/logout), WFilter server IP, script key.
		+
		+	* Add adclient.exe to domain's logoff script:
		+
		+	[[File:adclient03.png\|600px]]

	== FAQ ==		== FAQ ==

@@ Line 35: / Line 35: @@
 ** The default user entry timeout is 30 hours. If no re-logon happens in 30 hours after last time logon, this username will be timeout.
 ** Some programs in the client device will automaticaly logon into the domain with a different AD user. In this case, you can add this user into the "Exception List".
 == FAQ ==

@@ Line 1: / Line 1: @@
 {{DISPLAYTITLE:AD Integration}}
 == AD Integration ==
-"AD Integration" enables you to intergrate WFilter NG Firewall with microsoft active directory, so you can:
+"AD Integration" enables you to integrate WFilter NG Firewall with microsoft active directory, so you can:
 * Detect AD username of online devices.
 * Set internet access and bandwidth shaper policies based on AD users.

@@ Line 1: / Line 1: @@
 {{DISPLAYTITLE:AD Intergration}}
 == AD Intergration ==
-"AD Intergration" enables you to intergrate WFilter ROS with microsoft active directory, so you can:
+"AD Intergration" enables you to intergrate WFilter NG Firewall with microsoft active directory, so you can:
 * Detect AD username of online devices.
 * Set internet access and bandwidth shaper policies based on AD users.
@@ Line 15: / Line 15: @@
 To enable "AD Intergration", the following conditions must be met:
-* A valid enterprise license of WFilter ROS.
+* A valid enterprise license of WFilter NG Firewall.
 * A valid active directory.
 * Admin access to the active directory(The admin user shall belong to the "Domain Admins" group.)
@@ Line 23: / Line 23: @@
 * Notice:
-** WFilter ROS uses different machanism to retrieve logon domain users when the DC is in external or internal network.
+** WFilter NG Firewall uses different machanism to retrieve logon domain users when the DC is in external or internal network.
 ** When "automatically sync domain users" is enabled, new or deleted domain users will be synced to WFilter.
 ** WFilter detects a domain user when it login into the active directory. So you might need to wait sometime to see logon users.

@@ Line 7: / Line 7: @@
 For example:
-* The real-time bandwidth:
+* The real-time bandwidth will show AD username:
 [[File:ros_adconf_001.png|650px]]
-* Choose applied-to users:
+* Choose applied-to users(AD OU & users):
 [[File:Faq_en_adconf003.png|600px]]