DMA OperationsGuide Microsoft Active Directory Integration
176 Polycom, Inc.
See also:
“Microsoft Active Directory Integration” on page163
“Microsoft Active Directory Page” on page165
“Active Directory Integration Procedure” on page169
“Active Directory Integration Report” on page418
About the System’s Directory Queries The Polycom DMA system uses the following subtree scope LDAP queries. In
a standard AD configuration, all these queries use indexes.
•User Search
•Group Search
•Global Group Membership Search
•Attribute Replication Search
•Configurable Attribute Domain Search
•Domain Search
•Service Account Search
The system runs the first three queries every time it creates or updates its
cache:
•When you click Update on the Microsoft Active Directory page
•When the system restarts (if integrated with the Active Directory)
•At the scheduled daily cache refresh time
The elements in italics are examples. The actual values of these variables
depend on your configuration.
User Search
This search queries the global catalog. In a standard AD configuration, all the
filter attributes and attributes returned are replicated to the global catalog.
•Base:
<empty>
Note
Unless users have already been provisioned with passcodes in your Active
Directory or you’re using an existing attribute, most users will probably not have
passcodes assigned. Duplicate and invalid passcodes should be your main concern
because they could indicate a problem with the type of data in the selected
attributes or with the number of characters you elected to use.