Relinking users 编辑

When creating a user in ShareFile/Citrix Content Collaboration using the User Management Tool (UMT), a GUID is added to the users and distribution groups which “links” that user or group to Active Directory (AD). This GUID is used as an anchor so that if a user’s information, such as their name or email address, is changed in AD, then it is also updated in ShareFile/Citrix Content Collaboration. However, in a few scenarios, such as changing domains where your existing AD linked user or group is created as a new user or group in the new domain, you must relink the user or group using the UMT.

Only UMT versions 1.8.1 and later and UMT for PBA versions 1.11 and later support relinking users.

AD Link Reset Mode

AD Link Reset Mode is a special operating mode in the UMT which allows the UMT to update the AD GUID that maps a user or distribution group to the corresponding AD user or group. (When in normal operating mode, UMT does not update this field once it has been set.) This GUID-based link is normally set by UMT when a user or group is either initially created from AD or when an existing ShareFile/Citrix Content Collaboration user is associated with an AD user using email matching.

AD Link Reset Mode is only available in the UMT UI application. Scheduled jobs do not run while UMT is in AD Link Reset Mode - they exit with an appropriate exit code and log message - before processing any rules. Also, any other UMT UI instances are prevented from executing (on machines / Windows users other than the one on which the mode was enabled).

Once UMT has been placed in AD Link Reset Mode, it does not exit AD Link Reset Mode until the rules have been refreshed on the Rules tab and any relink actions have committed successfully.

UMT resets AD links based on existing user and group rules, and only updates links of existing users and groups that already have the AD GUID field set. While in AD Link Reset Mode, UMT does not make any other changes to ShareFile/Citrix Content Collaboration users or groups, it only updates the AD GUID link.

UMT also prevents any other changes to rules or configuration changes while in AD Link Reset Mode. Unavailable functionality is disabled and grayed in the UI. Unavailable functionality includes but is not limited to the following:

All Versions:

• Creating rules
• Editing existing rules
• Scheduling jobs using the Schedule button on the Rules tab

v 1.11:

• Reordering rule priority
• Search tab

v 1.8.1:

• Users tab
• Groups tab
• Zones tab

Perform the AD Link Reset

1. Disable any scheduled UMT jobs in Windows Task Scheduler.

2. Launch the UMT, sign in to the new domain and create the correct user and group rules. Do not commit the rules yet.

3. Close the UMT.

4. Add the following AD Link Reset Mode Registry Key.

Note:

If you are using more than one UMTs in your environment, you only need to add the Registry Key to one machine and run the AD relinking from that machine.

  HKEY\_CURRENT\_USER\\SOFTWARE\\Citrix\\ShareFile\\UMT
  String Value
  Name: EnableADLinkReset
  Data: you can leave this blank
<!--NeedCopy-->