Windows sign-in setup

To configure the Windows sign-in method, click the Setup link for this method on the Access Control page.

Select the Enable Windows Sign In (Kerberos and NTLM) check box.

Add Windows domains to be recognized by the product:

Enter the FQDN or IP address in the Trusted Domains field.

Enter the fully-qualified host name or an IP address in dotted-decimal notation.

	NOTE:	If DNS settings are not set appropriately, a fully-qualified domain name might be required.

Click the Add button.

By default, the first domain added to the trusted domain list is automatically selected as the Default Windows Domain. If other trusted domains have been added, they can be selected as the default domain in the Default Windows Domain field.

Verify the match and retrieval default attributes and update if necessary.

	NOTE:	The Enable reverse DNS lookups option is selected by default. Use a secure connection (SSL) is disabled by default.

Match and retrieve attribute fields:

●

Match the name entered with this attribute field—The sAMAccountName attribute is entered by default. This attribute retrieves the Windows Active Directory account name to verify the user names.

●

Retrieve the user's e-mail address using this attribute field—The mail attribute is entered by default and is the recommended attribute. This attribute retrieves the Windows Active Directory user's email address to pre-populate address fields as appropriate.

●

Retrieve the device user's name using this attribute field—The displayName attribute is entered by default. This attribute retrieves the Windows Active Directory display name.

To verify that the sign-in method is working correctly, enter a valid Username and Password in the Test Windows Sign in area, and then click the Test button.

At the bottom of the page, click the OK button to save the settings.

	NOTE:	To remove a domain, select the domain, and then click the Remove button.