# Install Active Directory (AD) Snap-in

The optional AD Snap-In allows the NuPoint UM server to import user configuration from an Active Directory server. The AD Snap-In also adds a user property sheet to the AD User Interface for NuPoint attributes. NuPoint user properties can be modified and saved with this interface. When the properties are saved, the Snap-In pushes the changes to the NuPoint database.

The AD Snap-In comprises two components:

1. The snap-in configurator, which appears as an installed executable program on the Windows PC. Administrators use the configurator for the following functions:

- Associate Active Directory with a NuPoint system for the purpose of managing users on the NuPoint system.

- Where licensing allows, specify the data source for the NuPoint Speech Auto Attendant. The possible data sources are the associated NuPoint system, the Active Directory users, or the MiCollab. If the data source is Active Directory, then several additional settings are required.

2. The snap-in itself, which appears as an additional property tab for users in Active Directory.

Administrators can add and delete NuPoint users from the snap-in and change some basic settings (for example, class of service, Unified Messaging settings, Speech Auto Attendant settings). In addition, the snap-in allows the administrator to associate Active Directory user accounts to NuPoint user accounts.

The AD Snap-in functions with Active Directory Services on Windows Server 2008 and 2012 R2. It is supported on 32-bit systems and can be used on 64-bit systems by running Active Directory Users And Computers in 32-bit mode (that is, starting the program with the /32 option). This is done with the following command or shortcut:

%SystemRoot%\system32\dsa.msc /32

Notes:

- The AD Snap-In does not extend the schema on the server but the user does need schema rights.

- The AD Snap-In is not supported for Lotus or Google implementations.

The AD Snap-In is provided in the form of a Windows installer that you can run on any PC that has access to AD Users and Computers with schema rights. The executable will install the Snap-In and provide an icon on the desktop that will allow you to configure the Snap-In at a later time or re-configure it if there are changes to be made.

To install the AD Snap-In:

1. Insert the NuPoint UM DVD1 and navigate to the ADSnapInSetUp.exe file. Double-click to open.

2. At the Welcome screen, click Next.

3. Select a destination for the installation or click Next to accept the default. The software installs.

4. At the Would you like to configure and register? prompt, click Yes. The End User License Agreement appears.

5. Read the end user license and then, if you agree, select I accept the terms in the license agreement. The configuration screen appears.

6. Enter the following information:

NuPoint Section:

- NPM Server FQDN or IP Address: Enter the fully qualified domain name of the NuPoint Unified Messaging server. This information is necessary for the AD Snap-In to connect to the NuPoint Unified Messaging server. When using a NuPoint UM 640 platform, specify the Cluster Name in this field.

- NPM Admin Login Name: Enter the account that the AD Snap-In will use to connect to the NuPoint Unified Messaging server. Use the "root" account.

- NPM Admin Password: Enter the password for the root account.

- Active Directory Section

- AD FQDN or IP Address: Enter the fully qualified domain name of the Active Directory server. This information is necessary for the AD Snap-In to connect to the NuPoint Unified Messaging server.

- AD Admin Login: Enter the account used to connect to the AD/LDAP repository. The account needs root privileges.

- Admin Container: Enter a fully qualified container name where the "AD Admin Name" account is located in the AD hierarchy.

- AD Password: Enter the password for the AD/LDAP account.

- AD Attribute: Skip this setting.

7. Click Next.

8. If Speech Auto Attendant licenses are present, a Speech Data Source configuration screen appears. The attributes that you configured for Privacy, Auto-Attendant User, and Default Telephone Number are displayed. Click Next. AD Configuration is complete.

The AD Snap-In adds a customized NuPoint tab under the properties of a user. This tab allows you to add a new NuPoint mailbox to the repository, or to edit an existing NuPoint mailbox. You can also launch the Web Console (by clicking the "View Web Profile" button) to modify additional fields that are not present in the NuPoint tab. The Snap-In establishes a connection to the NuPoint Unified Messaging server using a secure SOAP connection.

Note: NuPoint properties on this screen are disabled when SAA is installed as a standalone application.

You need to enable the NuPoint User check box on a property page in order to make the fields and the drop-down menus active. The drop-down menus will be populated with the actual FCOS and LCOS information from the NuPoint Unified Messaging server. Configuring the parameters on the NuPoint tab links the AD user with the NP-UM mailbox.

After the AD user and the mailbox have been linked, the Advanced UM Email Alias for the linked mailbox is also updated with the mailbox nickname. System users see the populated Advanced UM Email User Name field in the Web Console, in Web View and in the Text Console.

Note: Only those FCOS that contain LCOS values that have names will be populated. All other FCOS, and any unnamed LCOS, cannot be populated to the AD Snap-In. If you encounter an unnamed COS, use the Text console to name it.