UW Active Directory Modifications

UW Active Directory Modifications

Issue:

How does Lenovo Unified Workspace affect Active Directory and specifically the Schema?


Solution:

  • Why does UW need to extend the Schema of AD?
    Please see the following KB article for a full explanation: https://helpdesk.lenovosoftware.com/portal/kb/articles/schema-modifications-to-the-directory-22-8-2017

  • How does UW modify the Schema? What are the necessary requirements?
    The customer must create a domain service account for UW to use that has rights to read/write objects to the directory and modify the schema (only on initial install and during upgrades). Please see the following KB article explaining the service account: https://helpdesk.lenovosoftware.com/portal/kb/articles/creating-a-directory-service-account-22-8-2017

  • What modifications is UW making to the Schema?
    During the initial installation, UW will add (not modify or remove) several auxiliary attributes and classes to the AD schema so that later, UW will be able to create new directory objects for storing our configuration. All of the specific attributes and classes that we add (along with the matching syntax) is described publicly on our KB here: https://helpdesk.lenovosoftware.com/portal/kb/articles/latest-schema-report-22-8-2017

  • What other modifications does UW make to Active Directory?
    After the Schema has been updated, the installation wizard will ask to create a new container (OU) in the directory. This is where all of the necessary directory objects will be created that will serve as the base configuration for UW. Additionally, UW-specific information will be stored in the attributes of user and group objects.

    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        Will the shutdown of LUW servers and access to downloads affect my server licensing? No, the shutdown of the customer servers and access to the product and licensing downloads will not affect your server licensing. This license is downloaded and ...
      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...
      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...
      • LanSchool Documentation Guides

        LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...
      • Lenovo Unified Workspace 7.0.1.41 Released

        Highlights of Unified Workspace 7.0.1.41 Before you install: Please view the installation notes here. 7.0.1.41 requires a 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.1.41 Updated Log4j Updated Java Updated ...
      • Related Articles

      • Schema Modifications to the Directory

        Unified Workspace provides users with access to resources based on who they are in the directory and what groups they belong to.  To help create a personalized workspace for each user, Unified Workspace stores additional information on each user’s ...
      • Verify Active Directory SSL

        How can I check if my Microsoft Active Directory Domain controller / LDAP Server has SSL ?   The following URL has a nice write up about the Microsoft Tool called LDP.exe http://www.computerperformance.co.uk/w2k3/utilities/ldp.htm You can download ...
      • List of Active Directory Error Codes

        The error codes for Active Directory can be found at this Microsoft URL. http://msdn.microsoft.com/en-us/library/ms681381%28VS.85%29.aspx
      • Lingering Objects and Tombstones in Active Directory

        Issue Due to the way Active Directory works when removing objects, administrators can run into directory issues with Unified Workspace when AD doesn't completely do away with the object (leaving a tombstone behind). Finding and Removing Lingering ...
      • How do I backup Microsoft Active Directory ?

        While backing up AD is not a function of Stoneware, here are some urls that have some good information. Simple script to start a backup: ntbackup backup systemstate /J "AD Backup" /F "C:\\ADbackup.bkf" Best Practices for Active Directory Schema ...