Data Domain: Diagnosing Active Directory Users and Joining to an Active Directory with the DD System Manager Interface

Steps

1. Select Administration > Access > Authentication
2. Expand the Active Directory/Kerberos Authentication panel.
3. Click Diagnose.
4. Select an issue to investigate and click Diagnose.
5. Provide the requested information.
   To diagnose issues logging in as an Active Directory user, provide:
   • Active Directory server IP address
   • Active Directory server FQDN
   • Active Directory service username
   NOTE: The Active Directory user account specified here requires the following privileges:

   • Read-only access to the base DN identified by the domain name
   • Read-only access to query attributes of all users in the base DN.
   • Read-only access to query attributes of the machine accounts for the protection system.
   • Active Directory service password
   • Username experiencing login failure to diagnose issues joining the system to an Active Directory Domain, provide:
   • Active Directory server IP address
   • Active Directory server FQDN
   • Active Directory service username
   • Active Directory service password
6. Click Diagnose.
7. View the report.
   • Click View Report to view the report online. Each item in the Action Items table can be clicked for additional details.
   • Click Download to download a copy of the report.
8. Review and implement the suggested fixes for the issue and retry the operation.