Fabio_Dangelo  Freshman Member

Kay… that interface is from an older firewall. I'm using FLEX H series firewall now.

Hello Kay USG 110 is gone. Other ZyXEL support technician told me it is not already an option on H series. Is it that correct?

Hello Kay! Maybe my English is not good enough. My fault. I want to restrict AD authentication only to users that belong to a specific group. This was an easy task with USG110 firewall… with H series I don't know how to do it. thank you.

You know? AD integration will work for the entire directory, not only a selected group or OU. It's fun! isn't it?

Indeed! It's an unfinished product! You are right! I hope the missing features will be introduced soon. I need to manage some APs too… that features will comes in november. Bye. Fabio

Test is the user account with administration rights used to join the domain and used to query the DC? Did you added the required DNS forward rule too?

Really?😮

Solved! You have to be shure that user's distinguishedName is shorter than 63 char. If not it will fails. You can check user's distinguishedName in user advanced attributes in Active Directory User And Computer enabling "Advanced Features".

mine is 2016. I think the problem is this firewall (too young), not server OS. Let's see if ZyXEL can fix it.

this? I left the default values

any advise?