Sync Active Directory with Existing Resource and User Pool

[Incanus]

Hello:

I'm considering to synchronize my existing Project Server resource and
user pool with my company's Active Directory users DB.

Supposing that:

1. All of my resources to sync are already Project Server's users
2. All of said resources e-mail are on par with Active Directory data,
the descriptive names are in the proper format and the user's login
info is properly placed (<DOMAIN>\<user name>)

Do I need to do something else before attempting the sync?

What would exactly happen to my existing Project Server resource and
user pool after synchronizing it with Active Directory?

Thanks in advance for your kind reply!

Sebastián Armas

 

[Dale Howard [MVP]]

Incanus --

Before you attempt to use the Active Directory synchronization feature in
Project Server 2007, you need to do the following:

1. Create an AD group that contains the names of every resource that you
want to appear (or who already appear) in the Enterprise Resource Pool.

2. In PWA, click Server Settings - Active Directory Resource Pool
Synchronization. On the Active Directory Enterprise Resource Pool
Synchronization page in PWA, select the AD group you created in step #1
above, and set up the time to run the AD sync routine.

3. Create one AD group for each security Group in Project Server. In each
AD group, place the names of the people you want to appear in the security
Group, such as the Project Managers group, the Team Members group, etc.

4. In PWA, click Server Settings - Manage Groups. On the Manage Groups
page, click the Active Directory Sync Options button. Select a time for the
system to sync the AD groups that match Project Server security Groups. Be
sure to pick a different time than the one selected in step #2 above.

5. On the Manage Groups page in PWA, click the name of the first Group you
want to sync with AD and then click the Find Group button. Select the
corresponding AD group created in step #3 that matches the Group you are
editing. Repeat this process for each Group that has a corresponding AD
group created in step #3.

If you complete all of these steps, then you are ready to use both pieces of
AD sync functionality, which will allow you to add resources automatically
to the Enterprise Resource Pool and add users automatically to each Project
Server security Group, such as the Project Managers and Team Members group.
When you run the AD sync routine with the Enterprise Resource Pool, the
system compares the list of people in the AD group with the resources
already in the Enterprise Resource Pool. If there is a resource in the AD
group and not in the Enterprise Resource Pool, the system adds the resource
to the Enterprise Resource Pool. If the person in the AD group matches a
resource in the Enterprise Resource Pool(comparing metadata between the
two), the the system does nothing. If a resource is in the Enterprise
Resource Pool, but not in the AD group, the system sets the resource to
Inactive status.

The synch routine for Project Server security groups functions in a similar
manner. Hope this helps.

 

[Incanus]

Incanus --

Before you attempt to use the Active Directory synchronization feature in
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas

 

[Dale Howard [MVP]]

Incanus --

I believe that the AD sync operation creates both a resource and a
corresponding user account during each sync operation. This is because the
AD information for the person contains their Windows network ID. That is
why you should sync both the Enterprise Resource Pool AND the Project Server
security Groups with AD.

Beyond this, however, you can manually create User accounts in PWA for
people such as executives who will not serve as resources on projects. When
you create each of these individual User accounts from the Manage Users page
in PWA, be sure to deselect the "User can be assigned as a resource"
checkbox at the top of the New User page, and also be sure to select the
"Prevent Active Directory synchronization for this user" checkbox as well.
Hope this helps.

Incanus --

Before you attempt to use the Active Directory synchronization feature in
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas

 

[Incanus]

Dale:

Again, crystal clear and very much to the point.

Very gratefully yours,

Sebastián Armas

Incanus --

I believe that the AD sync operation creates both a resource and a
corresponding user account during each sync operation.  This is becausethe
AD information for the person contains their Windows network ID.  That is
why you should sync both the Enterprise Resource Pool AND the Project Server
security Groups with AD.

Beyond this, however, you can manually create User accounts in PWA for
people such as executives who will not serve as resources on projects.  When
you create each of these individual User accounts from the Manage Users page
in PWA, be sure to deselect the "User can be assigned as a resource"
checkbox at the top of the New User page, and also be sure to select the
"Prevent Active Directory synchronization for this user" checkbox as well..
Hope this helps.

Incanus --
Before you attempt to use the Active Directory synchronization featurein
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas

 

[Dale Howard [MVP]]

Sebastian --

You are more than welcome, my friend!

Dale:

Again, crystal clear and very much to the point.

Very gratefully yours,

Sebastián Armas

Incanus --

I believe that the AD sync operation creates both a resource and a
corresponding user account during each sync operation. This is because
the
AD information for the person contains their Windows network ID. That is
why you should sync both the Enterprise Resource Pool AND the Project
Server
security Groups with AD.

Beyond this, however, you can manually create User accounts in PWA for
people such as executives who will not serve as resources on projects.
When
you create each of these individual User accounts from the Manage Users
page
in PWA, be sure to deselect the "User can be assigned as a resource"
checkbox at the top of the New User page, and also be sure to select the
"Prevent Active Directory synchronization for this user" checkbox as
well.
Hope this helps.

On May 19, 8:17 am, "Dale Howard [MVP]"
<dale[dot]howard[at]msprojectexperts[dot]com> wrote:
Incanus --

Before you attempt to use the Active Directory synchronization feature
in
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas

 

[Gary L. Chefetz]

I believe that if you put people into the group synchronization only, then
the system creates them as users and not resources.

--
Gary L. Chefetz, MVP, MCT, MCTIP
Business: http://www.msprojectexperts.com
FAQs: http://www.projectserverexperts.com
BLOG: http://www.projectserverhelp.com

Dale:

Again, crystal clear and very much to the point.

Very gratefully yours,

Sebastián Armas

Incanus --

I believe that the AD sync operation creates both a resource and a
corresponding user account during each sync operation. This is because
the
AD information for the person contains their Windows network ID. That is
why you should sync both the Enterprise Resource Pool AND the Project
Server
security Groups with AD.

Beyond this, however, you can manually create User accounts in PWA for
people such as executives who will not serve as resources on projects.
When
you create each of these individual User accounts from the Manage Users
page
in PWA, be sure to deselect the "User can be assigned as a resource"
checkbox at the top of the New User page, and also be sure to select the
"Prevent Active Directory synchronization for this user" checkbox as
well.
Hope this helps.

On May 19, 8:17 am, "Dale Howard [MVP]"
<dale[dot]howard[at]msprojectexperts[dot]com> wrote:
Incanus --

Before you attempt to use the Active Directory synchronization feature
in
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas

 

[Dale Howard [MVP]]

Gary --

Good catch! I should have mentioned that. Thanks for sharing.

I believe that if you put people into the group synchronization only, then
the system creates them as users and not resources.

--
Gary L. Chefetz, MVP, MCT, MCTIP
Business: http://www.msprojectexperts.com
FAQs: http://www.projectserverexperts.com
BLOG: http://www.projectserverhelp.com

Dale:

Again, crystal clear and very much to the point.

Very gratefully yours,

Sebastián Armas

Incanus --

I believe that the AD sync operation creates both a resource and a
corresponding user account during each sync operation. This is because
the
AD information for the person contains their Windows network ID. That
is
why you should sync both the Enterprise Resource Pool AND the Project
Server
security Groups with AD.

Beyond this, however, you can manually create User accounts in PWA for
people such as executives who will not serve as resources on projects.
When
you create each of these individual User accounts from the Manage Users
page
in PWA, be sure to deselect the "User can be assigned as a resource"
checkbox at the top of the New User page, and also be sure to select the
"Prevent Active Directory synchronization for this user" checkbox as
well.
Hope this helps.





On May 19, 8:17 am, "Dale Howard [MVP]"
<dale[dot]howard[at]msprojectexperts[dot]com> wrote:
Incanus --

Before you attempt to use the Active Directory synchronization
feature in
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas

 

[Gary L. Chefetz]

I just knew you meant to.

--
Gary L. Chefetz, MVP, MCT, MCTIP
Business: http://www.msprojectexperts.com
FAQs: http://www.projectserverexperts.com
BLOG: http://www.projectserverhelp.com

Gary --

Good catch! I should have mentioned that. Thanks for sharing.

I believe that if you put people into the group synchronization only,
then the system creates them as users and not resources.

--
Gary L. Chefetz, MVP, MCT, MCTIP
Business: http://www.msprojectexperts.com
FAQs: http://www.projectserverexperts.com
BLOG: http://www.projectserverhelp.com

Dale:

Again, crystal clear and very much to the point.

Very gratefully yours,

Sebastián Armas

On May 19, 11:30 am, "Dale Howard [MVP]"
<dale[dot]howard[at]msprojectexperts[dot]com> wrote:
Incanus --

I believe that the AD sync operation creates both a resource and a
corresponding user account during each sync operation. This is because
the
AD information for the person contains their Windows network ID. That
is
why you should sync both the Enterprise Resource Pool AND the Project
Server
security Groups with AD.

Beyond this, however, you can manually create User accounts in PWA for
people such as executives who will not serve as resources on projects.
When
you create each of these individual User accounts from the Manage Users
page
in PWA, be sure to deselect the "User can be assigned as a resource"
checkbox at the top of the New User page, and also be sure to select
the
"Prevent Active Directory synchronization for this user" checkbox as
well.
Hope this helps.





On May 19, 8:17 am, "Dale Howard [MVP]"
<dale[dot]howard[at]msprojectexperts[dot]com> wrote:
Incanus --

Before you attempt to use the Active Directory synchronization
feature in
Project Server 2007, you need to do the following:

[...]

Dale:

Thanks a lot for such a complete an detailed response!

One question remains: I understand that this AD sync function allows
you to sinchronizo both resources and users provided users are
resources and vice versa. Am i mistaken or is it possible to
sinchronize users from AD only as Project Server resources without
making them also Project Server users or vice vrersa?

Awaiting your kind reply,

Sebastián Armas