The Microsoft AD integration is still on preview build and subject to change until the full release.
Security Admins can now perform response actions from accounts originating from an on-premise active directory.
Trend Micro Vision One provides the following response action from the search app using the following keywords:
- logonUser
- processUser
- mailbox
The supported response actions are as follows:
- Disable User Account
- Enable User Account
- Force Password Reset
Click the image to enlarge.
Configure the data Synchronization and User Access Control between Microsoft AD ( On-premises) and Trend Micro Vision One.
- On the Trend Micro Vision One console, go to Administration > Third Party Integration > Active Directory (On-premises)
Click the image to enlarge.
- Enable and Connect the AD Server to Trend Micro Vision One. Then Download and install the Active Directory Connector agent.
Click the image to enlarge.
The Service Gateway is needed to connect the On-premise AD to Trend Micro Vision One. You may refer to the Service Gateway deployment article on how to deploy.
Click the image to enlarge.