Working with existing accounts

Enabling and Disabling clients from Windows AD or Entra ID synchronization

Each client has a flag that can be set that will enable or disable their Windows AD or Entra ID synchronization. This applies to both Windows AD and Entra ID profiles. This flag can be set by one of the following methods:

Method 1 - For an individual client

1. From the HelpMaster Desktop Entities tab, open the client details screen for the client.
2. On the Permissions tab, Active Directory frame, check or clear the “Enable Active Directory Synchronisation” checkbox.

Method 2 - For an individual client or a group of clients

1. From the HelpMaster Desktop Entities tab, open the Client search screen and search for the clients you wish to update
2. Select each client you wish to update
3. Right-click on any selected client to display the popup menu
4. Select either Enable Client(s) for Active Directory synchronization or Disable Client(s) for Active Directory synchronization which will apply to all selected clients

Associating and Disassociating clients from Windows AD or Entra ID synchronization

Each client that has been matched to a corresponding Windows AD or Azure ID user will continue to be updated as long the HelpMaster Active Directory service is running and that client has the “Enable Active Directory Synchronisation” checkbox checked. On occasion, it may be necessary to disassociate a HelpMaster client from an Active Directory user. This can be done by one of the following methods:

Method 1 - For an individual client

1. From the HelpMaster Desktop Entities tab, open the client details screen for the client.
2. On the Permissions tab, Active Directory frame, click the “Un-associate from Active Directory” button

Method 2 - For an individual client or a group of clients

1. From the HelpMaster Desktop Entities tab, open the Client search screen and search for the clients you wish to update
2. Select each client you wish to update
3. Right-click on any selected client to display the popup menu
4. Select “Un-associate Client(s) from Active Directory” which will apply to all selected clients

Method 3 - For all clients

1. From the HelpMaster Desktop Automation tab, open the Active Directory Profiles screen
2. Click on the Global tab
3. Click on the button entitled “Unassociate all” to remove ALL client associations to Windows AD & Entra ID

Please note that when you disassociate any HelpMaster client from Windows AD or Entra ID, their “Enable Active Directory Synchronisation” checkbox will automatically be unchecked. This is to prevent the HelpMaster user from automatically being re-associated with the same, or similar Windows AD or Entra ID user the next time an enabled Active Directory Profile is run. If you wish to have this client re-associated with a Windows AD or Entra ID user you will need to re-enable them for Active Directory synchronization. See the section above on how to do this.

ReSync SIDs

This option will re-synchronise the Windows AD security identifier (SID) and Active Directory Email Address, and/or Entra ID Object ID and Email address between HelpMaster and the Active Directory for all users. This should only be performed if your domain controller has been rebuilt and the AD users’ Windows UPNs have not changed.

See Also

Working with the Active Directory module

Profile Filter date

Client Admin

Entity Searching