Procedure

1. Go to Administration → Settings → Active Directory and Compliance Settings.
2. Click the Active Directory Settings tab.
3. Select Enable Active Directory synchronization and authentication.
4. Configure the connection settings to access an Active Directory server.

   Field	Description
   Server address	Type the FQDN or IP address (IPv4 or IPv6) of the Active Directory server.
   User name	Type the domain name and user name required to access the Active Directory server. Example format, domain\user_name
   Password	Type the password required to access the Active Directory server.

   • To add another Active Directory server, click the add icon ().
   • To delete an Active Directory server, click the delete icon ().
5. From the Synchronization frequency (in hours) drop-down list, select how often Trend Micro Apex Central synchronizes data with Active Directory servers.

   Note Active Directory synchronization times vary based on the size and complexity of the Active Directory database. You may need to wait for more than an hour before synchronization completes.

6. (Optional) Expand Advanced settings to configure the Synchronization source or Connection mode.
   1. Select one of the following synchronization sources:
      • Domain controllers: Synchronizes all domains from multiple forests with trust relationships
      • Global catalog: Synchronizes all domains from a single forest

        Important Some information used by Trend Micro Apex Central, such as geographic location and user membership in global groups or domain local groups, cannot be synchronized from a global catalog with default settings. Choose to synchronize from a global catalog only if your network policy restricts Trend Micro Apex Central from connecting to all domain controllers.

   2. Select one of the following connection modes:
      • SSL

        Important To use an SSL connection, import the Active Directory Certificate to the Trend Micro Apex Central server.

      • Non-SSL
7. (Optional) Click Test Connection to test the server connection.

   Note Testing the connection does not save the Active Directory server settings.

   The Active Directory server connection status icon ( or ) appears in front of the server address.
8. Click Save.
   Trend Micro Apex Central synchronizes endpoint and user information from the Active Directory server(s) according to the synchronization frequency.
9. (Optional) Configure which Active Directory domains and OUs Trend Micro Apex Central synchronizes by modifying the ADSyncOUList.config configuration file located at:
   <Apex Central installation directory>\ADSyncOUList.config
10. (Optional) Click Synchronize Now to manually synchronize Active Directory data.
    The Active Directory server connection status icon ( or ) appears in front of the server address.
11. To remove a synchronized Active Directory server:
    1. Clear the Enable Active Directory synchronization check box.
    2. Click Clear Data to purge the Trend Micro Apex Central server of data from the removed Active Directory server.
       Trend Micro Apex Central removes the synchronized Active Directory server.

       Note Clicking Clear Data triggers a scheduled task, which runs every 2 minutes, to purge all data of the removed Active Directory servers from the Apex Central database.