Change to Directory Integrated Mode

Running the configuration wizard indexes frequently searched attributes in the Active Directory global catalog.

1. Go to the install directory C:\Program Files\BeyondTrust\PBIS\Enterprise.
2. Run ConfigurationWizard.exe.
3. On the Promote Attributes page, click Promote Attributes.
4. After the attributes are promoted, click Finish.

The necessary attributes are updated.

Changes Applied by the Directory Integrated Mode Configuration

This is not a schema extension. All attributes are part of the RFC 2307 and have existed as part of the Active Directory schema since 2003.

After you raise the domain and forest to 2012 functional levels, the AD Bridge domain configuration wizard changes the following attributes. These are required for AD Bridge to run in Directory Integrated mode. These attributes already exist as part of the RFC 2307.

Schema admin rights are required to make the following changes.

Promotes and indexes the following attributes to the global catalog:

• displayName
• gidNumber
• uid
• uidNumber

Promotes (but does not index) the following attributes to the global catalog:

• gecos
• loginShell
• unixHomeDirectory

For more information on the Directory Integrated mode, see Storage Modes in Active Directory.

To Change to Directory Integrated Mode During Installation

Running the configuration wizard promotes and indexes frequently searched for attributes in the Active Directory global catalog.

1. Go to the install directory C:\Program Files\BeyondTrust\PBIS\Enterprise.
2. Run ConfigurationWizard.exe.
3. On the Promote Attributes page, click Promote Attributes if needed.
4. After the attributes are promoted, click Finish.

The necessary attributes are updated.

To Change to Directory Integrated Mode via LDF Files

The Active Directory schema changes are applied from a set of LDAP Data Interchange Format (LDIF) files. The standard installation places these files in the following directory: Program Files\BeyondTrust\PBIS\Enterprise\Resources\LDF.