The Microsoft AD integration is still on preview build and subject to change until the full release.
Security Admins can now perform response actions from accounts originating from an on-premise active directory.
TrendAI Vision One provides the following response action from the search app using the following keywords:
- logonUser
- processUser
- mailbox
The supported response actions are as follows:
- Disable User Account
- Enable User Account
- Force Password Reset
Click the image to enlarge.
Configure the data Synchronization and User Access Control between Microsoft AD ( On-premises) and TrendAI Vision One.
- On the TrendAI Vision One console, go to Administration > Third Party Integration > Active Directory (On-premises)
Click the image to enlarge.
- Enable and Connect the AD Server to TrendAI Vision One. Then Download and install the Active Directory Connector agent.
Click the image to enlarge.
The Service Gateway is needed to connect the On-premise AD to TrendAI Vision One. You may refer to the Service Gateway deployment article on how to deploy.
Click the image to enlarge.