Installation

This chapter describes how to install the AD Sync solution.

Install the Password Filter

If you want to synchronize user passwords from a source domain controller to any given target systems, you have to install and configure the Password Filter on every domain controller of the source system.

1. Copy the dll IngridPwFilter.dll into C:\windows\system32

2. Change the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages and add the new value IngridPwFilter Its the same name as the dll without .dll. Do the registry change via PowerShell:

$reg = Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\" -Name "Notification Packages"
$value = $reg.'Notification Packages' + "IngridPwFilter"
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\" -Name "Notification Packages" -Value $value

3. Add the following new registry keys - replace token and address with your settings

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\ITD\INGRID]
"token"="YourToken"
"port"="5999"
"address"="good.ingrid.com"

4. Reboot the server (required to load the filter for Active Directory)

For information about configuring and using it, refer to the next chapter Configuration.