Modify the permissions of ADManager Plus installation folder   

Starting from 7210 release, the Authenticated Users group will be removed access to the installation directory, and only users in the SYSTEM, Administrators, Domain Admins groups, and the user account linked during installation will have default access.

If you are using builds prior to 7210, to remove the Authenticated Users group from ACL you can either manually modify the permission settings or use the SecureDeployment.exe file to automatically modify the settings.

Click here for detailed information about this scenario, and the steps to modify the permissions of ADManager Plus installation folder.

Disabling or restricting the Employee Search option   

Based on the specific needs of your organization or for security reasons, you can:

1. Limit the scope of Employee Search to only specific domains, or OUs.

2. Specify the details of users or contacts that can be displayed in the search result.

3. Specify the attributes or details based on which users or contacts can be located.

4. Disable the Employee Search option completely.

Click here for the steps to customize or disable the Employee Search option.

Change the default admin password   

Why should you do this? 

We recommend that you change the default admin password, at least before you move to the deployment phase from the evaluation phase, for security reasons. You can change the default password in the My Account section found in the top right corner of the product's web-console.

Click here for steps to change the default admin password.

​Additional security for ADManager Plus logins   

ADManager Plus supports smart card, two-factor authentication (TFA), CAPTCHA, etc. and also allows you to block users in case of bad passwords, to enhance the security for user logon process and prevent unauthorized users from logging in. Click the links below for steps to configure the various options to secure the logon process for your users.

• Enable Captcha

• Configure smart card-based authentication

• Enforce two-factor authentication (TFA)

• Enable single sign-on (SSO)

• Configure block user settings

Security hardening   

ADManager Plus offers a series of security and data privacy options to improve your management and reporting experience, secure access to the product, secure data disposal, and more. To learn how to configure the security and privacy settings in ADManager Plus, click here.