OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
Active Directory Integration
2-26
Integrate OfficeScan with your Microsoft Active Directory structure to manage
OfficeScan clients more efficiently, assign web console permissions using Active
Directory accounts, and determine which endpoints do not have security software
installed. All users in the network domain can have secure access to the OfficeScan
console. You can also configure limited access to specific users, even those in another
domain. The authentication process and the encryption key provide validation of
credentials for users.
Active Directory integration allows you to take full advantage of the following features:
• Role-based administration: Assign specific administrative responsibilities to users
by granting them access to the product console using their Active Directory
accounts. For details, see Role-based Administration on page 12-2.
• Custom client groups: Use Active Directory or IP addresses to manually group
clients and map them to domains in the OfficeScan client tree. For details, see
Automatic Client Grouping on page 2-42.
• Outside server management: Ensure that computers in the network that are not
managed by the OfficeScan server comply with your company’s security guidelines.
For details, see Security Compliance for Unmanaged Endpoints on page 13-65.
Manually or periodically synchronize the Active Directory structure with the OfficeScan
server to ensure data consistency. For details, see Synchronizing Data with Active Directory
Domains on page 2-28.