Configuring AD User Login

AD users log in through AD domain authentication. This topic describes the procedure for configuring AD user login.

NOTE:

Before configuring AD user login, back up the database and key.
In the cluster environment, perform step 5 only for AD user login configuration.

Create a user on the AD server.
1. Log in to the AD server.
2. Click Start and choose Administrative Tools > Active Directory Administrative Center.
  The Active Directory Administrative Center window is displayed.
3. Right-click the Users folder and choose New > User.
  The Create User window is displayed.
4. Enter the user name and password and click OK, as shown in Figure 1.
  Figure 1 Creating a user
5. Log in to the AD server using the new account and password.
  NOTE:
  At the first login, change the login password as prompted.
Change the DNS address of the SMC2.0 server.
1. Log in to the SMC2.0 server.
2. Click Start and choose Control panel > Network and Internet > Network and Sharing Center, as shown in Figure 2.
  Figure 2 Network and Sharing Center window
3. Click Local Area Connection 4.
  The Local Area Connection 4 Status dialog box is displayed.
4. Click Properties. In the dialog box that is displayed, double-click Internet Protocol Version 4(TCP/IPv4).
  The Internet Protocol Version 4(TCP/IPv4) Properties dialog box is displayed.
5. Select Use the following DNS server addresses and enter the DNS address, as shown in Figure 3.
  Figure 3 Internet Protocol Version 4(TCP/IPv4) Properties dialog box
6. Click OK.
Add the SMC2.0 server to the domain.
1. Log in to the SMC2.0 server.
2. Click Start, right-click Computer, and choose Properties.
  The System window is displayed.
3. Click Advanced system settings.
  The System Properties dialog box is displayed.
4. On the Computer Name tab, click Change.
  The Computer Name/Domain Changes dialog box is displayed.
5. Select Domain under Member of, enter the domain name, and click OK, as shown in Figure 4.
  Figure 4 Computer Name/Domain Changes
  The dialog box for confirming the DNS account and password is displayed.
6. Enter the DNS user name and password added in step 1 and press Enter.
  The SMC2.0 server's desktop is displayed with a welcome message.
7. Click OK.
  A dialog box is displayed, prompting you to restart the computer.
8. Restart the SMC2.0 server.
  After being restarted, the SMC2.0 server is added to the domain successfully.
Modify some service operation accounts on the SMC2.0 server.
1. Log in to the SMC2.0 server using the account and password of the local administrator. Then choose Start > Control Panel > User Account > Change account type.
2. In the User Accounts window that is displayed, click Add. Enter the user name and domain name added in step 1 and click Next.
3. In the Add New User window, select Administrator and click Finish. Then click OK.
4. Log out of the SMC2.0 server. Then log in to the SMC2.0 server again as the user added in step 1 and copy the ChangeServiceCredentials.battool to the SMC2.0 server.
  NOTE:
  To obtain the ChangeServiceCredentials.bat tool, visit http://support.huawei.com/enterprise and choose Downloads > Unified Communications and Collaboration > Telepresence and Videoconferencing > Videoconferencing Infrastructure > SMC2.0.
5. Right-click ChangeServiceCredentials.bat and choose Run as administrator.
6. In the window that is displayed, enter the domain account and password to add and press Enter.
7. As prompted in the window, check whether the SMC service account is the default account smc20_service_user.
  - If yes, enter Y and press Enter.
  - If no, enter the actual account and password and press Enter.
8. In the window that is displayed, enter the password of the local administrator user and click OK.
NOTE:
If the password of the user added in step 1 is changed, perform sub steps 4 to 8 under step 4 again.
Configure AD authentication on the SMC2.0 web interface.
1. Log in to the SMC2.0 web interface.
2. Choose System > Settings.
  The Settings page is displayed.
3. Choose Network Services and set parameters under External User Login Configuration.
4. Select AD domain authentication from the User login type drop-down list box and set other parameters, as shown in Figure 5.
  Figure 5 AD user login configuration
5. Click Save.
  The Confirm dialog box is displayed, telling that the SMC2.0 web interface will be restarted if you change external user login settings.
6. Click Yes.
  The SMC2.0 web interface is restarted and displays the login page that contains an external user login entry.
  You can log in to the SMC2.0 using an external user account from this entry.
  NOTE:
  If the external user login entry does not appear, refresh the login page and check whether the entry is displayed.