Edit dynamic list

The dynamic list contains a path to the container (e.g. organizational unit) in the directory service tree (such as Active Directory, Novell eDirectory, OpenLDAP and so on).

Each time the task is executing, DeviceLock Enterprise Server retrieves all the computers that currently exist in this container. Hence, if some computer was removed from the directory tree or moved to another container it will not be monitored anymore. And vice versa, if there is some new computer that didn't exist in the container at the time the task was created/modified, but was added to this container later, it will be retrieved and monitored at the time of executing the task.

A path to the container from which computers will be retrieved at the time of executing the task, should be specified in the Path parameter. You must use the LDAP string representation for distinguished names.

You may browse the directory tree and choose the needed container by pressing the Select button. In this case a path to this container will be specified in the Path parameter automatically.

Check the Traverse subcontainers when enumerating computers flag to allow DeviceLock Enterprise Server to retrieve computers from all the nested containers located inside the selected container. Otherwise, if this flag is unchecked all nested containers are ignored, and only computers located directly in the selected container are retrieved at the time of executing the task.

There are two modes to work with the directory service:

• Active Directory - You browse the Active Directory tree and select the needed container.

While the Active Directory tree can also be displayed by choosing the LDAP option (see below), the Active Directory mode results in greater efficiency between directory service and DeviceLock Enterprise Server service and thus resource savings.

If you need to supply alternative credentials to access Active Directory, press the … button to specify the needed user account and its corresponding password.

Check the Synchonization flag to allow DeviceLock Enterprise Server to use the internal synchronization mechanisms provided by Active Directory. This will dramatically reduce the load on the domain controller and speed up the process of retrieving computers at the time of task execution. NOTE: Administrative access to Active Directory is required to use the synchronization function.

• LDAP - You browse the LDAP (Lightweight Directory Access Protocol) tree and select the needed container.

To configure a connection to the LDAP server, press the … button and open the LDAP Settings dialog box.

• English-to-Russian translation