Synchronization with AD Project 2003

M

mike

I have installed Project 2003 and Wss on 2003 server. Everything
appears to be ok. I want to synchronize all my users and groups with
AD.

Under server configuration in Project 2003 there is line "Active
Directory Group to Synchronize" I have a question.

Which group to i put on this line? In my organiztaion we have 800
windows groups. I want all users to have access to this product?
thx
dave
 
L

Lars Hammarberg

I'd do it this way (note! I haven't tried using the Domain Users group
before - only sync.ed with Domain Admins --> PWA Administrators, but it
*should* work... :)

1. Identify the AD group containing all users for which you have PWA
licenses and for whom you want TeamMember access. If all of your users are
going to be part of this, simply use the Domain Users group.
2. Repeat for the Resource Manager, Project Manager and Portfolio Manager
groups as well as any groups you've defined yourself.
3. Map the PWA groups to the AD groups in
http://<YourServer>/projectserver/Admin/sec_groups.asp (Modify groups)
4. Run the SetTracing app (downloadable from MSDN) and make sure waringns
and errors are logged.
5. Sync or set sync options for later sync.

Also: the PWA "deny" security setting over-rides an "allow"...

Some errors I've run into: you'll get AD sync errors if users in the AD
doesn't have Full Name or if you've re-defined the default AD fields or if
you're using custom schemas that the AD/PWA sync engine doesn't understand

/Lars Hammarberg
www.camako.se
MSProject Premier Partner
 
Top