Top Level Web Node - CN=Managed Domains or Container of Domains

Question

First off I have to say that Adaxes is really extraordinary and has been such a massive help to delegate a lot of the day-to-day AD management across mutiple untrusted forests.

Currently we're using adm-CustomAttributeText3 as our Top Level Node in the Web Interface. We have business rules that set the correct value based on the user type and the OU that their account is located in. Thanks to our OU structure (Domain\Location-Address\Department\Etc.) it's simple to define a Top Level that matches the users Management level.

We are hitting a snag when we get to Technicians that support all locations in all domains however. If we attempt to use (CN=Managed Domains,CN=Configuration Objects,CN=Adaxes Configuration,CN=Adaxes) for the Top Level node we get "Managed Domains is not a valid object". If we add each domain to a business unit we can set the DN of BU to top level node but this breaks the browsing ability, instead you click on that BU and get new page, then click domain and get new page, now you can drill down.

So I wanted to see if anyone knows if there is a DN for all Managed Domain which we could use for our Technicians Top Level Node in the Web Portal? Or if this is the wrong approach and you know of a better way to get the same result (while keeping our OU structures), please let me know. I'm still fairly new to Adaxes and have a lot to learn about how it functions under the hood, and a lot of SDK documentation left to read.

Answer 1

Hello,

First off I have to say that Adaxes is really extraordinary and has been such a massive help to delegate a lot of the day-to-day AD management across mutiple untrusted forests.

Thank you for your good words, it is much appreciated! We do our best to provide highest level service to our customers.

So I wanted to see if anyone knows if there is a DN for all Managed Domain which we could use for our Technicians Top Level Node in the Web Portal?

Unfortunately, there is no such thing. For such cases, it is recommended to have two separate Web interfaces. One will be configured as you have it now and will only be accessed by the corresponding users. The other one will not have a top level node at all and will be accessed only by technicians. For details on how to configure user access to Web interface, have a look at the following tutorial: https://www.adaxes.com/help/AllowDenyAccessToTheWebInterface.