Add members to the Password Sync local security groups

Access to the Administration Tools, and permissions to send synchronization requests to the Sync Server, are controlled through local security groups on the Specops Password Sync server. Users and groups must be members of the local security groups in order to access the Administration Tools.

  1. Open Computer Management.
  2. In the console tree, click Groups.
  3. Browse to the following Security Groups:

Local security group: Specops Password Change Notifiers

This group should contain the “Domain Controllers” domain security group.

  1. Right-click Specops Password Change Notifiers, and select Properties.
  2. Click Add….
  3. Enter the name of the Users or Groups you want to select.
  4. Click OK.
    NOTE
    If more than one object matches the name, you will need to select one or more names from the list.
  5. Click OK.

Local security group: Specops Password Sync Admins

This group can be found on machines where the admin tool has been installed and can be used to grant or deny access to specific group or users.

  1. Right-click Specops Password Sync Admins, and select Properties.
  2. Click Add….
  3. Enter the name of the Users or Groups you want to select.
  4. Click OK.
    NOTE
    If more than one object matches the name, you will need to select one or more names from the list.
  5. Click OK.