Skip to main content

KYDSO

Configuring the account reconciliation

KYDSO regularly compares the accounts with your company's Active Directory.

You can adjust the following settings as required for the reconciliation:

Search expression

The search expression determines which account types are considered in the account reconciliation.

System default: (|(objectCategory=person)(objectClass=msDS-GroupManagedServiceAccount)) (search for persons and managed service accounts)

Only a search for personal objects is permitted. Other search objects are not supported by account reconciliation.

The search expression entered is not validated. If an invalid search expression is entered, the reconciliation runs into an error. You can find information on the structure of search expressions for example at Creating a Query Filter

Search range

The search range defines the Active Directory object for which the account reconciliation is to be performed.

System default: empty (the entire Active Directory is searched)

To change the configuration for account reconciliation:

  1. Click on the View assets action in the View data menu.

    The asset list opens. For performance reasons, this is empty the first time it is opened after starting KYDSO.

  2. Search for the article Account reconciliation configuration and click on the corresponding Details.

    The current settings are displayed in the Information section.

  3. Click on Change data.

    The wizard for the selected action starts and guides you through the process.

In this section: