How do you add a user into Change Guardian for Active Directory who is in an untrusted domain (NETIQKB72841)

  • 7772841
  • 02-Mar-2011
  • 15-Mar-2013

Environment

Security Manager 6.x

NetIQ Change Guardian for Active Directory 1.8

Situation

How do you add a user into Change Guardian for Active Directory who is in an untrusted domain

Resolution

Browsing to add a user will not work with CGAD and domains with trust issues. You can however input the text in the field itself without browsing. Type the user in this format:

domain\user

Cause

When you are logged into Control Center or the Configuration Wizard in a domain, and a user from a differen domain which is not trusted needs to be added, you are unable to browse to add the user.

Additional Information

Formerly known as NETIQKB72841

Please note that the GUI will not validate the user that you input, so you will need to test this after adding the user. Also, you can technically go into the Development Console and add the user there, however you will need to modify a much larger set of rules. It is advisable to only edit this in the Configuration Wizard.