PRTG 9 Manual: Active Directory Integration
PRTG offers a detailed rights management via different user groups. For detailed information please see User Access Rights.
In order to make user management easier, you can integrate an existing Active Directory into PRTG in four steps. During this process, you will connect an Active Directory (AD) group with a user group in PRTG. All members of your AD group will then be able to log into PRTG using their AD domain credentials. Note: You cannot add single AD users to PRTG, but only allow access for entire groups. A PRTG user will be created automatically for each AD user who logs in to PRTG successfully.
Step 1: Prepare Your Active Directory
- In your Active Directory, please make sure that users you want to give access to PRTG are member of the same AD group.
- You can also organize users in different groups, for example, one group whose members will have administrator rights within PRTG, and another one whose members will have read-only rights within PRTG.
Step 2: Prepare Your PRTG Server
- Make sure that the computer running PRTG is member of the domain you want to integrate it to. You can check this setting in your machine's System Properties (for example, Control Panel | System and Security | System, click on Change settings link).
Step 3: Add Domain to System Settings
- In the PRTG web interface, switch to the System Administration—System and Website settings.
- In the Active Directory Domain field, enter the name of your local domain. Note: You can only integrate one AD domain into PRTG.
- Save your settings.
- Switch to the User Groups tab (see System Administration—User Groups).
- Click on the Add User Group button to add a new PRTG user group.
- In the dialog appearing, enter a meaningful name and set the Use Active Directory setting to Yes.
- From the Active Directory Group drop down menu, select the group of your Active Directory whose members will have access to PRTG.
- Save your settings.
That's it. All users in this Active Directory group can now log in to PRTG using their AD domain credentials. Their user accounts will use the PRTG security context of the PRTG user group you just created.
- Active Directory users can log in to the web interface using their Windows username and password (please do not enter any domain information in PRTG's Login Name field). When such a user logs in, PRTG will automatically create a corresponding local account on the PRTG core server. Credentials are synchronized with every login.
- By default, there aren't any rights set for the new PRTG user group. Initially, users in this group will not see any objects in the PRTG device tree. Please edit your device tree object's settings and set access rights for your newly created user group in the Inherit Access Rights section. Note: The easiest way is to set these rights in the Root Group Settings.
- PRTG does not support SSO (single sign-on).
Keywords:
