After the first login, go to the Roles section and add the current user to the Administrator role, refresh the page, then all sections should be available in the console.

Open the Users section, click the search icon, make sure that all users from the specified Organization Unit are read correctly.

Go to the Configuration, Licenses section. Copy the Installation ID and submit it to Indeed Technical Support to issue a license file. When you receive a license file PAM_yyyy.mm.dd.lic, here in the section, click Add and select the specified file.

Go to the Configuration section. Here you need to fill in the network paths to storages of video, files transferred to the server, screencasts of sessions, as well as the domain, username and password to access these folders. In the Gateway connection settings, specify the RDCB address, RDCB collection name. In the SSH Proxy settings, specify the SSH Proxy address, save the changes.

Go to the Events section - the event of changing the configuration parameters should be displayed there.

If there are no errors, then you can proceed to adding objects.

Adding the domain

  1. Go to Domains section, click Add
  2. Enter the domain name (for example INDEED-ID) and its DNS name (for example indeed-id.local), click Save
  3. Open the domain page
  4. Click Add account, enter the service account name (for example, IPAMADServiceOps)
  5. Set the password manually and click Save
  6. Click the pencil  icon next to Service account and select the service account (IPAMADServiceOps) 
  7. Click Check connection and check if the connection was successful.
  8. Here, on the domain page, go to the Resource containers tab and add an AD container that contains the required domain resources (for example, Computers)
  9. Here, on the domain page, go to the Privileged groups tab and specify the security groups that contain the accounts which users will use to access domain resources (for example, IPAMPrivilegedAccounts).
  10. Here, on the domain page, click the Import Resources and Sync accounts buttons. After that, all available resources and accounts will be added to the corresponding sections of the console.
  11. If necessary, go to the Events tab to view detailed information about domain events.

Add and take control of accounts

In the Accounts section, check the imported domain accounts: they begin with the domain name, are marked with a question mark, and have a Pending state. At the top, click the Make managed button. Then, the password for the selected accounts will be reset to a new one in accordance with the policy.

Adding non-domain resources

  1. Go to the Resources section, click Add
  2. Enter the Resource name, DNS name and/or IP address
  3. At the User connection step, select the connection type, specify the connection address and port if necessary.
  4. At the Service connection step, uncheck the Use connector for service connection checkbox (since local accounts have not been added yet), finish adding the resource. The new resource appears in the resource list.
  5. Open the resource page, click Add account, set the password manually

The resource is ready to use: you can create permissions for it.

To perform service operations (searching and adding accounts, automatically changing passwords, updating resource information), it is necessary to set up a service connection.


  • No labels