> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/knowledge-base/knowledge-base-articles/entry-settings/active-directory-synchronizer.md).

# Active Directory Synchronizer

Configure every Active Directory Synchronizer field in Remote Desktop Manager, including synchronization mode, login, fields, and filters.

Every field from the ***Active Directory Synchronizer*** entry is described below.

{% hint style="info" %}
To learn more about creating and managing an Active Directory, consult the documentation on the official website.
{% endhint %}

The entry can be found under ***New Entry*** – ***Synchronizer***.

<table data-header-hidden><thead><tr><th width="236.4000244140625"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Name</strong></td><td>Entry name as displayed in Remote Desktop Manager.</td></tr><tr><td><strong>Folder</strong></td><td>Which Remote Desktop Manager folder the entry will be in.</td></tr><tr><td><strong>Credentials</strong></td><td>Read more on <a href="/rdm/ribbon-menu-bar/edit/entry-credentials-options.md"><em><strong>Credentials</strong></em> options</a>.</td></tr><tr><td><strong>Synchronize automatically</strong></td><td>If this box is checked, the Remote Desktop Manager entry will synchronize automatically with Active Directory.</td></tr></tbody></table>

### General

<table><thead><tr><th width="315.60003662109375">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Mode</strong></td><td><ul><li><strong>Custom</strong>: Choose which <em><strong>Domain machine</strong></em> and <em><strong>OU/Container DN</strong></em> to get the information from.</li><li><strong>LDAP</strong>: To extract Active Directory computer information using LDAP query. The <em><strong>Domain machine</strong></em> field becomes <em><strong>Path</strong></em>, and the <em><strong>OU/Container DN</strong></em> field is hidden.</li><li><strong>My domain</strong>: Use the current domain. The <em><strong>Domain machine</strong></em> field is unavailable in this mode.</li></ul></td></tr><tr><td><strong>Ping domain before synchronization</strong></td><td>Verifies if the domain is up before synchronization. Unavailable when <em><strong>Mode</strong></em> is set to <em><strong>LDAP</strong></em>.</td></tr><tr><td><strong>Domain machine</strong></td><td>Set the domain machine by clicking on the ellipsis button. This field is required when <em><strong>Mode</strong></em> is set to <em><strong>Custom</strong></em>.</td></tr><tr><td><strong>Path</strong></td><td>The LDAP path of the directory, shown instead of <em><strong>Domain machine</strong></em> when <em><strong>Mode</strong></em> is set to <em><strong>LDAP</strong></em>. The path is required and must start with <code>LDAP://</code> or <code>LDAPS://</code>. Click the help button in the field to open the Microsoft documentation on LDAP paths.</td></tr><tr><td><strong>OU/Container DN</strong></td><td>Select the OUs or Containers by clicking on the browse button. Hidden when <em><strong>Mode</strong></em> is set to <em><strong>LDAP</strong></em>.</td></tr><tr><td><strong>Search scope</strong></td><td><ul><li><strong>One level</strong>: Searches only the direct children of the selected OU or container.</li><li><strong>Subtree</strong>: Searches the selected OU or container and all of its sub-containers.</li></ul></td></tr><tr><td><strong>Use LDAP over SSL</strong></td><td><p>If enabled, uses the secure LDAP protocol. The port field next to it is available only when this option is checked:</p><ul><li><strong>Default</strong>: Default LDAPS port 636; click on <em><strong>Default</strong></em> to set a different port.</li><li><strong>Port generator</strong>: Generate a port.</li></ul></td></tr><tr><td><strong>Template</strong></td><td>Select a template.</td></tr><tr><td><strong>Destination folder</strong></td><td>Choose a destination folder.</td></tr><tr><td><strong>Folder creation mode</strong></td><td><p>How the synchronizer creates folders for the imported entries:</p><ul><li><strong>Folder entry</strong></li><li><strong>Create virtual folders</strong></li></ul></td></tr><tr><td><strong>Test connection</strong></td><td>Tests the connection. When an <em><strong>OU/Container DN</strong></em> is entered, the test also checks that it exists.</td></tr><tr><td><strong>Preview</strong></td><td>Lists all the imported machines. When <em><strong>Action on entry mismatch</strong></em> is set to an action other than <em><strong>None</strong></em>, choose whether the preview applies or ignores that action.</td></tr></tbody></table>

### Login

<table><thead><tr><th width="343.5999755859375">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Username</strong></td><td>Username for the domain.</td></tr><tr><td><strong>Domain</strong></td><td>Domain for the Active Directory.</td></tr><tr><td><strong>Password</strong></td><td>Password for the domain. This field is unavailable when the <em><strong>Disable password saving in vaults</strong></em> system setting is enabled.</td></tr><tr><td><strong>Merge username and domain</strong></td><td>Merges username and domain.</td></tr></tbody></table>

The ***Username***, ***Domain***, and ***Password*** fields are available only when the entry's own credentials are used.

### Filters

<table><thead><tr><th width="159.59991455078125">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Type</strong></td><td><p>LDAP syntax filters can be used in many situations in Active Directory:</p><ul><li><strong>All</strong>: Default filter.</li><li><strong>Server</strong>: Adds a filter to only include Windows Server.</li></ul></td></tr><tr><td><strong>Other filters</strong></td><td>An additional LDAP filter added to the filter built from <em><strong>Type</strong></em>.</td></tr><tr><td><strong>Preview</strong></td><td>Preview of the applied filters. This field is read-only.</td></tr></tbody></table>

### Fields

Choose which fields will always be synchronized, and which will not. For example, the description could be left purposely unsynchronized and later edited manually.

Select or clear the checkbox of a field in the list to synchronize it or not. Select a field to show its options next to the list.

<table><thead><tr><th width="196.39996337890625">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Field</strong></td><td><p>Select which fields will always be synchronized, and which will not between:</p><ul><li><strong>Session name</strong>: Synchronized by default.</li><li><strong>Hostname</strong>: Synchronized by default.</li><li><strong>OU/Containers</strong>: Not synchronized by default.</li><li><strong>Description</strong>: Not synchronized by default.</li></ul></td></tr><tr><td colspan="2"><strong>Session name field</strong></td></tr><tr><td><strong>Session name</strong></td><td>Choose between <em><strong>Common name</strong></em>, <em><strong>DNS hostname (FQDN)</strong></em>, and <em><strong>Host and description</strong></em>.</td></tr><tr><td><strong>Session name prefix</strong></td><td>A prefix for the entry that will be created through the synchronizer.</td></tr><tr><td><strong>Session name suffix</strong></td><td>A suffix for the entry that will be created through the synchronizer.</td></tr><tr><td colspan="2"><strong>Hostname field</strong></td></tr><tr><td><strong>Host</strong></td><td><p>Where the host of the created entries comes from:</p><ul><li><strong>Default</strong>: Uses the same value as the session name.</li><li><strong>Common name</strong></li><li><strong>DNS hostname (FQDN)</strong></li><li><strong>Same as template host</strong>: Uses the host of the selected <em><strong>Template</strong></em>. When the template has no host, the session name is used.</li></ul></td></tr><tr><td colspan="2"><strong>OU/Containers field</strong></td></tr><tr><td><strong>Level</strong></td><td>The number of top OU/container levels left out of the folder path created for each entry. With 0, every level is kept.</td></tr><tr><td><strong>Folder template</strong></td><td>Select a template for the folders created by the synchronizer.</td></tr><tr><td colspan="2"><strong>Description field</strong></td></tr><tr><td><strong>Field override</strong></td><td>The name of an Active Directory attribute to use for the description instead of the default one.</td></tr></tbody></table>

### Schedule

This tab is shown only when the data source supports scheduled synchronizers.

<table><thead><tr><th width="325.20001220703125">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Enabled</strong></td><td>Schedule being on or off.</td></tr><tr><td><strong>Every</strong></td><td><p>Interval between when the synchronizer runs. Enter a number (minimum 1) and choose the unit:</p><ul><li><strong>Days</strong></li><li><strong>Hours</strong></li></ul></td></tr><tr><td><strong>At</strong></td><td>Specific time to synchronize. Shown when the interval unit is set to <em><strong>Days</strong></em>.</td></tr></tbody></table>

### Advanced

<table><thead><tr><th width="233.20001220703125">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Silent mode</strong></td><td>This option disables error dialogs (useful when the synchronizer runs automatically at set intervals).</td></tr><tr><td><strong>Update folder only for newly discovered items</strong></td><td>Set the folder only on newly discovered items. When this option is checked, an existing entry located in a different folder is not treated as a match during synchronization.</td></tr><tr><td><strong>Duplicate check</strong></td><td><ul><li><strong>Root</strong>: Check for duplicates within the whole workspace.</li><li><strong>Destination folder</strong>: Check for duplicates only within the Remote Desktop Manager destination folder or subfolder. <em><strong>Duplicate check</strong></em> will not import entries with the same type and host.</li></ul></td></tr><tr><td><strong>Action on entry mismatch</strong></td><td><ul><li><strong>None</strong>: Do nothing.</li><li><strong>Delete</strong>: Delete that entry.</li><li><strong>Move to</strong>: Move to the selected <em><strong>Destination folder</strong></em>.</li><li><strong>Make expired</strong>: Mark that entry as expired (expiration message can be set up).</li></ul></td></tr><tr><td><strong>Destination folder</strong></td><td>The folder where mismatched entries are moved. Shown when <em><strong>Action on entry mismatch</strong></em> is set to <em><strong>Move to</strong></em>.</td></tr><tr><td><strong>Expiration message</strong></td><td>The message of the expired entries. Shown when <em><strong>Action on entry mismatch</strong></em> is set to <em><strong>Make expired</strong></em>.</td></tr></tbody></table>

### See also

* [Devolutions Academy - Configuring Synchronizers](https://academy.devolutions.net/student/path/1925039/activity/2667195)
* [Devolutions blog - Spotlight on: Active Directory synchronizer in Remote Desktop Manager](https://blog.devolutions.net/2025/03/spotlight-on-active-directory-synchronizer-in-remote-desktop-manager/)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.devolutions.net/rdm/knowledge-base/knowledge-base-articles/entry-settings/active-directory-synchronizer.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.