Domain

The domain is used to authenticate the user. This is the most secure, flexible, and simple to manage. No need to synchronize users between the domain and Devolutions Server. With the Automatic user creation on first login option enabled, upon using Devolutions Server workspace for the first time, a user is created and given access rights according to their assigned role on the domain.

Simply grant the appropriate permissions for your user groups in Devolutions Server, and Devolutions Server will automatically sync permissions if the user group matches the domain group to which the users belong.

Domain configuration is located in Administration – Server settings – Authentication – Domain in the web interface of Devolutions Server.

Settings

Domain authentication

Option	Description
Domain	Specify the remote computer domain name.
Display name	Enter the domain name to be displayed in various locations in the application, e.g., in informational messages. Specify the Active Directory Organizational Unit (OU) or Group to restrict the search in a specific area in the Active Directory structure. The format must be the distinguished name (CN=Users,DC=windjammer,DC=loc).
Administration credentials	Add the credentials of a domain or service account to access the Active Directory forest and obtain user account information through LDAP queries. This account needs to be able to retrieve user account information and group memberships. It may require higher privileges than being part of the Domain Users built-in Active Directory group, although it should be sufficient in most cases.

Advanced settings

Option	Description
Preferred domain controller	Set a preferred domain controller from the network domain list, forcing queries to go to a known, reliable Domain controller (DC).
Domain containers	Limit the scope of searches to specific domain containers.
Browse domain containers	Pick a domain container from the DC list or check the Use Devolutions Gateway box.
Strategy	Choose a strategy determining how to retrieve objects like groups, users, and subdomains.

LDAPS

Option	Description
Enable LDAPS	Enable LDAPS: Enable the LDAP over SSL communication. Default: LDAPS default communication port. Custom: Set a specific port value.

Auto-create domain users in database

Option	Description
Auto-create on first login	Automatically create the domain user account in the Devolutions Server on the first login attempt.
Only from this group	Automatically create the user only if they are a member of this AD group.
Username format	Select the username format that will be created in the database. UPN: The user will be created using the UPN format ex: [e-mail]. NetBios: The user will be created using the NetBios format ex: WINDJAMMER\bill. Username: The user will be created using the SAM account name.