RM Logo
Technical Rating: 
Support Home PageSupport
Print This PagePrint This Page
Add to 'My Library' Add to 'My Library'

RM Unify AD Sync Service v3
Published Date : 18 Jul 2014   Last Updated : 18 Oct 2019   Content Ref: DWN3182456  





Description

RM Cloud Service Delivery can assist you with your RM Unify AD Sync installation.For further information, please speak to your Sales representative on 0800 046 9798 or email networks@rm.com, quoting this article.

RM Unify AD Sync is available to RM Unify Premium account customers, or customers who have purchased RM SafetyNet. It allows network managers to synchronise local school user accounts and passwords with RM Unify. This service ensures that students and school staff can access RM Unify with the same user account details that they use to access their local network resources.

There are two components: RM Unify AD Sync and the RM Unify Password Filter. This download article provides:

  • RM Unify AD Sync v3 for Community Connect® 4 (CC4) Release Note.
  • RM Unify AD Sync v3 for Microsoft® Windows Server® networks Release Note.
  • The file RM_Unify_AD_Sync_v3.zip, which contains installers for:
    • RM Unify AD Sync.
    • RM Unify Password Filter.


Platforms

RM Unify AD Sync can be installed on the following networks:
  • CC4 networks (including CC4 Matrix):  
    • CC4.5/CoP Connect on Prem (Windows Server 2012 R2 and 2016)
    • CoP Connect on Prem (Windows Server 2019)
  • Other Active Directory networks based on:  
    • Windows Server 2012 R2.
    • Windows Server 2016.
    • Windows Server 2019


Requirements

**Important - Pre-existing AD Sync RM Unify accounts**

If you already have an RM Unify establishment populated with AD Sync provisioned user accounts from a different Active Directory or CC4 network, you must perform an AD Sync migration as per TEC4061769 'Migrating RM Unify AD Sync provisioning to a new Active Directory', which can be found in the Other Useful Articles section below.

If you do not, you risk duplicating all of your RM Unify accounts and also all your Office 365 and/or G Suite accounts etc.


Important point to note re RM CC4 UEV
If you have RM CC4 UEV (User Environment Virtualisation) installed on your CC4 network, then after installing RM Unify AD Sync you will need to change the default role mappings, from Profile path, to either AD location or Group membership. More details can be found in TEC6583553 in the Other Useful Articles section below.

Pre-requisites and installation:
  • RM Unify AD Sync cannot process network users where the users are members of an AD group with a '\' or '/' in the name. Neither can it process users who are in OUs containing '\' or '/'. You must rename any such groups or locations to remove these characters prior to installing AD Sync. Please refer to TEC5212534 in the Other Useful Articles section for more information.
  • Prerequisites for installing RM Unify AD Sync:
    • Microsoft .NET Framework v3.5 SP1.
  • Prerequisites for installing RM Unify Password Filter:
    • Microsoft .NET Framework v3.5 SP1.
    • The appropriate version of Microsoft Visual C++ 2010 Redistributable Package for your server (32-bit and 64-bit, depending on the operating system version).

Passwords are captured when they are changed on the network.

  • For schools installing RM Unify AD Sync for the first time, all users must change their password in order to fully synchronise local network accounts and passwords with RM Unify. The release notes give instructions for forcing a password change.
  • Installation of the RM Unify Password Filter will require a reboot of all domain controllers.
  • Refer to the appropriate release notes for full information on requirements, how to check the prerequisites and how to install the components.

Active Directory requirements for installing RM Unify AD Sync multiple schools in a single AD domain

RM Unify AD Sync allows LAs, academy trusts or clusters of schools that have consolidated their Active Directory into a single domain to use a single instance of RM Unify AD Sync.

The set of users in each school is identified by an Active Directory organisational unit (OU) and optional group membership. This means that either each school should be identifiable in the Active Directory by a unique OU or if all schools are in the same OU, then each school must have a unique Active Directory group.

Once the set of users in a school is identified, RM Unify AD Sync can use either child OU, Active Directory group membership or profile path to derive the user role for that school. This set of users is then assigned one of the standard set of roles understood by RM Unify (Student, Teaching Staff, Non-Teaching Staff, Governors, Other).



Download Instructions

If this is a new installation of RM Unify AD Sync or if you are upgrading from RM Unify AD Sync v3, you need to download these files:

  • RM_Unify_AD_Sync_v3.zip.
  • RM Unify AD Sync v3 Release Note relevant to your network.

To download a file from the Download section below:

  1. Right-click the disk icon for the file you want and choose Save Target As.
  2. When the Save As window prompts you for a destination, browse to the folder where you want to save it and click Save.
  3. When it has downloaded, click Close.


Download

FilenameFile SizeDownload
RM_Unify_AD_Sync_v3.zip6.41 Mb Download
RM_Unify_AD_Sync_v3_for_CC4_Release_Note.pdf1.42 Mb Download
RM_Unify_AD_Sync_v3_for_WS_Release_Note.pdf1.51 Mb Download


Installation Instructions

For instructions, please refer to the appropriate release note for your network:
  • For CC4 networks, follow the instructions in the RM Unify AD Sync v3 for CC4 Release Note from the Download section.
  • For other Windows Server networks, follow the instructions in the RM Unify AD Sync v3 for WS Release Note from the Download section.


Checks

Post-installation server checks
    1. Log on to the server as an administrator.
    2. Click Start, Control Panel.
    3. Follow the appropriate steps given below on your server operating system:
      • Windows Server 2012 R2
        1. Click Programs, 'Uninstall a program'.
        2. Select each component in turn and check its version number.
        3. Close the 'Uninstall or change a program' window.
        4. For any additional servers, repeat these steps.

Component

Version

RM Unify AD Sync* 3.0.146.0
RM Unify Password Filter 64-bit**

3.0.54.0

RM Unify Password Filter 32-bit***

3.0.54.0

* Only on the server where you have chosen to install RM Unify AD Sync.

** On all 64-bit domain controller servers.

*** On all 32-bit domain controller servers.


Post-installation user checks
  1. For new installations and upgrades, provision a new user into RM Unify. Once provisioned, change their network password and confirm you can log on to RM Unify.
  2. For upgrades only, change the network password of a user that was already provisioned into RM Unify and confirm you can log on to RM Unify with the new password.


Other Useful Articles

Migrating RM Unify AD Sync user provisioning to a new Active Directory (TEC4061769)
Supported deployment configurations with RM Unify AD Sync and Microsoft Office 365 (TEC3805265)
Installing CC4 UEV (User Environment Virtualisation) removes the profile path mappings used by RM Unify AD Sync (TEC6583553)
RM Unify - Membership of a group name containing a slash may prevent user provisioning (TEC5212534)
RM Unify - Attributes used by RM Unify and Office 365 (TEC4699981)
How to reinstall RM Unify AD Sync with a clean database (TEC5015612)

FEEDBACK
Did the information in this article help answer your question?
 Yes
 No
Please add any comments about this article in the box below. If you answered No then it is important you tell us why so that we can change the article if required. We can only respond if you log in to the RM Support website or provide your contact details. Note: If you need help with a technical query, please log a call online or telephone our support team.
Thank you for your feedback, which is sent directly to the RM Knowledge team. We address every message received with the intention of improving our Knowledge Library articles. If you have an unresolved technical issue, please contact RM Support.


If this article has not helped provide a solution then it is also possible to log a call...



Document Keywords: download, install, unify, provisioning, administration, synchronisation, ad sync v4, v3, ad sync, adsync, config tool


Please read - important disclaimer information.
http://www.rm.com/_RMVirtual/Includes/csredirect.asp?cref=&title=Standard Content Disclaimer


Top Of PageTop of page