LDAP Sync

[Marty_McGrath]

Does anyone know how often the LDAP sync for AD is run?

[rinks]

You should not get any duplicates with AD scanning as it pulls objects from the same OU's, unless you have users within multiple sites/OU's (for example, we get duplicates for many people within IT for our regular accounts and then a 2nd for our admin accounts). AD objects should be unique in all other aspects so no duplicates should occur.

[rinks · Accepted solution]

This can be set within your scanning target setup to run as often as you like. 

• Go to Scanning > Scanning Targets.

• Look for Active Directory Domain entries.

• Check or edit the schedule tied to each domain.

[Marty_McGrath]

thanks for the reply - the LDAP seemed to set up automatically in the initial config, do you know if we configure the AD as a scan target will it duplicate the user records?

[rinks]

It should not duplicate records as each AD object should be unique. For example, we scan our whole OU, but we have a scan target for AD users when we add someone new and need to update it quickly to find and add user relations within our assets. We don't get any duplicates when running this way.