Enabling the ADSI Option

Document ID : KB000011255
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

How to enable the ADSI option that is by default disabled?

Answer:

Important! ADSI is not fully supported and by default, is disabled.

WARNING! Do not use the ADSI or non-secure LDAP options in production environments.

The ADSI option allows you to test creating accounts with passwords and is sometimes useful for testing prior to acquiring SSL certificates. 

By default, the option button for enabling ADSI is disabled.
For example, Use LDAP with SSL; use ADSI to set passwords only.

To enable this option, the ADS_ALLOW_ADSI=1 environment variable must be added.

To activate ADSI you need to create and set the environmental value to:
ADS_ALLOW_ADSI=1.
Then restart the Provisioning services.
The option will then be available.

If ADSI does not work, try the following:

  • Install the Windows Support Tools on the Active Directory Services server you want to manage.
  • Run the Provisioning Server in the same domain as the Active Directory server.
  • Confirm that the Preferred DNS server field is set correctly on the Provisoining¬†server.
  • Start the Provisioning service with an ADS-domain -administrator account.