Active Directory Connector Part 2

Active Directory Connector Part 2

  • Comments 3
  • Likes

Editing an AD Connector

To edit an AD connector, highlight an AD Connector and click Edit Connector task in Tasks bar, which launches Edit AD Connector dialog.

The dialog allows you to change the connector name, description, and credentials which are used to connect to Active Directory and list of objects for synchronization.

Note:

·        Changing data source (which domain/OU you are connecting to) after the connector is created is not supported. You have to create another connector if you need to change the data source.

AD Connector Synchronization

Enabled AD connectors automatically run every hour to synchronize CMDB objects with changes in Active Directory.

When someone using Service Manager updates a property of a user, computer, or printer in Service Manager that change does not flow back to AD.  The AD connector is only one way from AD into Service Manager.

To synchronize connector on demand, highlight it in the view and click Sync Now. AD objects and their properties will be updated in a few minutes. Note that a disabled connector can’t be synchronized on demand.

You can check objects list to see if they are already imported/updated, or you can check event log for event 3339 (for each objects type) – see image below.

Note:

·        If more than one connector (AD or SCCM) update the same object than last one will overwrite object properties from its data source.

Deletion of an AD Connector

To delete a connector select it in the view and click on Delete Connector task. All data it brought into the CMDB and the connector itself will be deleted in a few minutes.

Notes:

·        If an object has been created or updated by another connector, it will not be deleted.

·        If you want to delete some objects you don’t have to delete a connector – each object can be deleted directly.

Disable/Enable an AD Connector

An AD Connector can be disabled from running (synchronizing) on schedule with Disable task. Disabled connector can be enabled with Enable task. You can see if connector is enabled or disabled with Enabled column in connectors view.

Useful Links

Use the next links to get additional information about connectors, product and related things:

·        Marc’s blog post “Creating an SCCM Connector for Service Manager Beta 1” - http://blogs.technet.com/umeno/archive/2008/12/02/creating-an-sccm-connector-for-service-manager-beta-1.aspx.

·        Active Directory Connector Part 1 - http://blogs.technet.com/servicemanager/archive/2009/01/28/active-directory-connector-part-1.aspx

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment
  • Thanks for the good articles.

    I'm having a issue regarding AD Connector, I would really appreciate if you can help me to solve the problem. Thanks in advance!

    Here is the detail of the error in Event viewer:

    Data synchronization failed by active directory connector.Importer.ADComputers.ADConnector.5ddeaf025ccc4f818fd5eda5a2a7b3b0.:Microsoft.EnterpriseManagement.ServiceManager.Connector.AD.DataConnectorAD.

    Exception type:ConnectorException

    Exception message:createBatchInfoForRealSource failed . Exception type:DatacenterException

    Exception message:Error accessing Active Directory. Get path failed:LDAP://G10D0.local/RootDSE,sourceName=LDAP://G10D0.local|dcFQDN=G10D0.local|searchDomain=G10D0.local|searchPath=..

    StackTrace:   at Microsoft.EnterpriseManagement.ServiceManager.Connector.AD.ActiveDirectoryUtility.InitState(DirectoryServerSates directoryStates)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.AD.ActiveDirectoryUtility.GetWatermark(DirectoryServerSates directoryStates)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.AD.DataConnectorAD.OnCreateBatchInfoForRealSource(SessionBase session, String query, String tableName, String batchIdField, Int32 batchIdType, String watermarkField, Int32 watermarkType, Byte[] watermark, String connectionString, Int32 batchSize)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.SessionManager.DataProvider.createBatchInfoForRealSource(SessionBase session, Int32 SessionTableId, EnumTableStatus status)

    Inner Exception:

    Exception message:The server is not operational.

    .

    StackTrace:   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)

      at System.DirectoryServices.DirectoryEntry.Bind()

      at System.DirectoryServices.DirectoryEntry.get_AdsObject()

      at System.DirectoryServices.PropertyValueCollection.PopulateList()

      at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)

      at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.AD.ActiveDirectoryUtility.InitState(DirectoryServerSates directoryStates).

    StackTrace:   at Microsoft.EnterpriseManagement.ServiceManager.Connector.SessionManager.DataProvider.throwConnectorException(String method, String message, Object[] values)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.SessionManager.DataProvider.createBatchInfoForRealSource(SessionBase session, Int32 SessionTableId, EnumTableStatus status)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.SessionManager.DataProvider.PrepareBatchInfo(SessionBase session)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.SessionManager.DataProvider.GetNextBatch(IConnectorSession connectorSession, Boolean batchInfoOnly)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.Datacenter.SessionHost.GetNextBatch(IConnectorSession session)

      at Microsoft.EnterpriseManagement.ServiceManager.Connector.Datacenter.SessionHost.DataSync()

  • It failed to connect to root directory using "LDAP://G10D0.local/RootDSE". "G10D0.local" may not be a valid domain name.

  • I am having the exact same problem as Le Thanh Son. And it is definitelly not the server/domain name. I can browse the AD Tree from within the wizard, and even select individual objects. But when the connector runs a sync it just fails with the same error Weird. Any ideas?