Ad360 Quick Start Guide
Ad360 Quick Start Guide
02 Deployment 2
System requirements 2
Installation 3
ADManager Plus 9
ADAudit Plus 10
ADSelfService Plus 10
RecoveryManager Plus 14
High availability 16
Reverse proxy 16
Enabling SSL 16
Database migration 17
Auto backup 19
Auto update 21
05 Support 24
1 / 24 www.manageengine.com/active-directory-360/
Overview
AD360 is an integrated solution that helps organizations simplify IAM and IT compliance challenges in
Windows Active Directory, Microsoft 365, Exchange Servers, and cloud applications. AD360 provides all the
features that you need to easily manage, audit, secure, and report on your entire Windows-based IT
infrastructure and cloud applications.
There are six different components that you can integrate with AD360, each of which provide a unique set
of features. You can choose the components you want based on your business requirements and integrate
them with AD360. Refer here for the list of components that you can integrate with AD360.
This document explains how to successfully deploy and configure the important settings of AD360 and its
components.
Deployment
System requirements
RAM 4GB
*Note:
RAM and disk space requirements could vary based on the components you've integrated with AD360.
Supported platforms
ManageEngine AD360 supports the following Microsoft Windows operating system versions:
2 / 24 www.manageengine.com/active-directory-360/
Supported browsers
One of the following browsers is required to access the AD360 web client.
Supported databases
For a detailed list of requirements, please refer our system and port requirements guide.
Installation
ManageEngine AD360 can be installed on any machine in the domain that satisfies the recommended
system requirements.
You can install AD360 as:
An application
A Windows service
Note:
Ensure that you have necessary privileges and rights to install and run the product. If you are using
Windows Vista or an older operating system, disable User Account Control and then proceed with the
installation. For more information, click here.
3 / 24 www.manageengine.com/active-directory-360/
You can choose from three modes of installation: Standard, Minimal, and Custom.
Standard installation: Downloads and installs all the components along with AD360.
This installation mode is highly recommended, as it installs AD360 along with all the components
necessary for comprehensive identity management and ensures IT security and compliance.
Minimal installation: Installs AD360 alone. You can opt for this installation mode if you are already
running the components you need. To integrate the components with AD360, follow the steps listed
here.
Custom installation: You can use this installation mode to pick and install only the components you
want along with AD360.
The application's web console can be launched by double-clicking the AD360’ shortcut icon on the
desktop. When opened as an application, AD360 runs with the privileges of the user who installed the
application.
Alternatively, you can also install AD360 as a service from the notification tray.
1. Install AD360 as an application.
2. Click the notification icon [ ] at the top-right corner of the screen.
3. Select the AD360 is not installed as a service alert, and the click Install. This will initiate AD360
service installation in the background.
Once the AD360 service is installed, you can start the product as a Windows service. When started as a
service, AD360 runs with the privileges of the system account or the service account (if configured).
Uninstalling AD360
To uninstall AD360, select Start Menu > All Programs > AD360 > Uninstall AD360.
4 / 24 www.manageengine.com/active-directory-360/
Working with AD360
Starting AD360
AD360 can be started either using the system account (when run as service) or user account (when run as
an application). Starting AD360 will also start the integrated components automatically.
On starting AD360, the client is automatically launched in the default browser.
Stopping AD360
To stop AD360, select Start > Programs > AD360 > Stop AD360.
You can enable the single shutdown option so that all the individual components will also be shut
down when AD360 is stopped. To enable this setting:
5 / 24 www.manageengine.com/active-directory-360/
Integrating the components
AD360 contains six components, each providing a rich but unique set of features. These components are:
1. ADManager Plus: Provides management, reporting, automation, delegation, and workflow
capabilities for Active Directory, Microsoft 365, Exchange, and Google Workspace.
2. ADAudit Plus: Performs real-time change auditing, alerting, and compliance management for
Active Directory, Azure Active Directory, and file servers.
3. ADSelfService Plus: Provides password self-service and single sign-on for Active Directory
and cloud applications.
4. Exchange Reporter Plus: Provides reporting, auditing, and monitoring capabilities for Exchange
Servers and Exchange Online along with reporting capabilities for Skype for Business Server.
5. M365 Manager Plus: Provides management, reporting, automation, delegation, auditing, and
alerting capabilities for Exchange Online, Azure Active Directory, Skype for Business, OneDrive for
Business, Microsoft Teams, and other Microsoft 365 services.
6. RecoveryManager Plus: Takes care of backup and recovery of Active Directory, Azure Active
Directory, Exchange Online, SharePoint Online, OneDrive for Business, Google Workspace,
and on-premises Exchange.
To effectively tackle all your Active Directory challenges, these six components have to be
integrated with AD360. To integrate these components, follow the steps given below:
Note:
If you've chosen the standard installation method, the components will be automatically installed
and integrated with AD360. For other modes of installation, please follow the below steps to
download, install, and integrate the components.
Note:
If you already have the components installed and running, please update the components to their latest
build and proceed with Step 2.
1. Download the components either from the link available under the dashboard of each
component or from the AD360 website.
2. Install the components one-by-one by double-clicking the downloaded EXE files and following
the instructions of the install shield wizard.
3. Once the installation is complete, start the components by double-clicking the desktop
shortcut icons of the respective components.
6 / 24 www.manageengine.com/active-directory-360/
Step 2� Integrate the components
Note:
Make sure that all the components that are to be integrated with AD360 are running before proceeding
with the steps given below.
1. Go to Admin > Administration > AD360 Integration. You will be presented with six tabs, each
representing a component of AD360.
2. Click on any tab (say ADManager Plus).
3. Enter the Server Name or IP and Port Number of the server in which that particular
component is running.
4. Select the connection Protocol from the drop-down menu.
5. Click Integrate Now.
6. Repeat steps 3-5 for the remaining components under the respective tabs.
7 / 24 www.manageengine.com/active-directory-360/
Setting up individual components
Synchronizing settings between the components
The domain settings, component integration, mail server, proxy server, and other similar configurations
will be automatically synchronized across each component. This saves a lot of time as you don't have to
configure the same settings across all the integrated components. Any changes you make in one of the
components will be automatically reflected in the other components, too.
Domain settings
A domain can be added only in the individual components and the details added in one component will
be synchronized with all other connected components. Also, if there is a change in the administrator
credentials that was used in configuring a domain with a component, simply update the change in one
component and it will be synchronized across all the other components.
Integration settings
The different components of AD360 communicate with each other for various purposes like single
sign-on, domain configuration updates, etc. Any change to the hostname and port number of a
component must be reflected in the other components' settings to facilitate uninterrupted
communication. But with the AD360, there is no need to make the changes in all the components
manually. Simply update these changes in the AD360 integration settings page and the changes will
be automatically synchronized across all the components.
Privileges required
Refer to this guide for more information on the permissions and privileges required by AD360 and the
individual components.
8 / 24 www.manageengine.com/active-directory-360/
ADManager Plus
Domain configuration
During start-up, ADManager Plus adds all the domains that could be discovered. If you wish to manually
add more domains or modify the added domains, follow the steps below.
You can perform the following actions from the Add Domain Details section:
1. Changing the default domain: The domain that is first discovered is considered as default domain.
The default domain is shown in bold letters. Delegating security roles can only be done to the security
principals of the default domain. If you wish to change the default domain, click the icon in the
Actions column to make it default.
2. Modifying a domain: To modify the domain details, click the <icon> icon, change the required
values, and click Save.
3. Deleting a domain: To delete a domain, click the <delete> icon.
4. Refreshing the domain details: To synchronize the object details with Active Directory,
click the <icon> icon.
9 / 24 www.manageengine.com/active-directory-360/
Google Workspace domain configuration
ADAudit Plus
Domain configuration
Please follow the domain configuration steps listed under ADManager Plus to add a domain in ADAudit Plus.
ADSelfService Plus
Domain configuration
Please follow the domain configuration steps listed under ADManager Plus to add a domain in
ADSelfService Plus.
Policy configuration
ADSelfService Plus offers a multitude of self-service features to domain users, including:
Self-service password reset
Self-service account unlock
Directory self-update
Password change from a web-based portal
As an administrator, you can decide whether users of a domain or selected OUs can avail themselves of
any or all of these functions. In other words, you set a self-service policy for the users and define what
features they can use in ADSelfService Plus.
From the Policy Configuration section, you can define, edit, or delete policies.
By default, when ADSelfService Plus discovers DCs of a domain, it sets a policy for the entire domain.
When you log in for the first time as an administrator, this default policy will be shown to you. By default,
every self-service feature is selected in the default policy.
10 / 24 www.manageengine.com/active-directory-360/
If it fits your requirement, you can retain it; otherwise, you can edit this default policy by following
the steps listed below.
This will allow users in the selected OUs to enjoy the self-service features that are selected in the policy.
Note:
ADSelfService Plus allows you to define any number of self-service policies in a given domain. If more
than one policy is applied to an OU or group, then the policy with the highest priority will take effect.
If you provide the appropriate credentials during installation, the Exchange Organization will be added
automatically to Exchange Reporter Plus. You can also manually add a new Exchange Organization
and modify, delete, or choose an existing Exchange Organization as the default from the
Organization Settings option.
11 / 24 www.manageengine.com/active-directory-360/
Configuring Exchange Server in Exchange Reporter Plus
1. Click the Org/Tenant Settings button at the top-right corner of the screen.
2. Under the Exchange Server tab, click Add New Organization.
3. Enter the name of the Global Catalog Server.
Note:
If the Exchange Server is within your forest, the Exchange Organization will be added automatically.
4. Enter the User Name and Password of a user account that has appropriate privileges.
5. Click Save.
1. Click the Org/Tenant Settings button at the top-right corner of the screen.
2. Under the Exchange Online tab, click Add New Tenant.
3. Enter the Account Name and Password of a user account that has appropriate privileges.
4. Click Save.
Any Exchange Organization can be set as the default by clicking on the <icon> icon next to the
corresponding Exchange Organization. The same applies for a Microsoft 365 tenant and Skype
for Business Server.
By design, the product dashboard shows reports, home graphs, and schedule creation options for
the server or tenant selected as the default.
12 / 24 www.manageengine.com/active-directory-360/
M365 Manager Plus
Configuring Microsoft 365 tenants
You can edit or delete the details of any existing Microsoft 365 tenant.
To edit an existing tenant, click the <edit> icon located in the Actions column of the desired tenant.
To delete a Microsoft 365 tenant, click the <delete> icon located in the Actions column of the desired tenant.
1. If a specific Microsoft 365 tenant is set as the default, then it will be the default tenant across all the
tabs of the product.
2. To make an Microsoft 365 tenant the default tenant, click the <default> icon located in the
Actions column of the desired tenant.
Permissions required
While configuring Microsoft 365 tenants, use the credentials of an administrator who is a member of
the Microsoft 365 global admin role.
13 / 24 www.manageengine.com/active-directory-360/
RecoveryManager Plus
Domain configuration
1. Click the Account Configuration button located at the top-right corner of the screen.
2. Select the On-premises AD tab.
3. Click the Add New Domain option located at the top-right corner of the screen.
4. Enter the name of the domain.
5. Click the Discover DCs link to automatically detect the domain controllers in the specified domain.
You can also add the domain controller manually by clicking Add and providing the name of the DC.
6. If you want the product to automatically connect to the secondary DC and start gathering
changes from the AD database if the primary DC fails, select the Enable auto-switch on
DC failure option.
Note:
This option is not recommended if your AD environment has more than 5,000 user objects.
RecoveryManager Plus incrementally backs up changes made to objects and their attributes
using DirSync. After each backup, the product stores a cookie that identifies the directory
state at the time of the previous DirSync search in the domain controller. When the domain
controller is changed, the cookies used to identify changes will not be available in the secondary
domain controller. This means all objects from the domain will be identified and checked with
backed-up data for any changes and the process will take as much time as a full backup to complete.
7. Enter the Username and Password of a domain administrator.
8. Click Add to add the domain details in the product.
1. Click the Account Configuration button located at the top-right corner of the screen.
2. Select the Office 365 Tenant tab.
3. Enter the Account Name and Password of the Microsoft 365 tenant. Use the credentials of an
administrator with the global admin role. The account name should be entered in the
account@company.onmicrosoft.com format.
4. You can also use a service account that is a member of the Microsoft 365 global admin
role to configure your tenant with RecoveryManager Plus.
Note:
If multi-factor authentication is enabled for the account used, provide the app password in the
Password field.
5. If you use Modern Authentication in your Microsoft 365 environment and Legacy
Authentication is disabled, you’ll need the client ID and client secret to configure your
Microsoft 365 account. To get your client ID and client secret, follow these steps.
14 / 24 www.manageengine.com/active-directory-360/
Note:
If you want to back up your Azure AD using RecoveryManager Plus, select Modern
Authentication and provide the client ID and secret.
6. Choose the Microsoft 365 environment in which the tenant was created from the drop-down box.
7. Click Save to add the tenant.
1. Click the Account Configuration button located at the top-right corner of the screen.
2. Select the Google Workspace tab.
3. Select the type of account that you wish to add to RecoveryManager Plus.
a. Personal account: Selecting this option will allow you to add a personal Google account
to RecoveryManager Plus.
b. Workspace account: Selecting this option will allow you to add a Google Workspace account
to RecoveryManager Plus. Once added, you can configure a backup schedule for all
users in the workspace.
15 / 24 www.manageengine.com/active-directory-360/
Exchange Server organization configuration
1. Click the Account Configuration button located at the top-right corner of the screen.
2. Select the On-premises Exchange tab.
3. Select the Server Type from the available options: Global Catalog and Exchange Server.
4. Provide the Server Name.
5. Enter the User Name and Password of a user who is a member of the Organization Management
role group. The user name should be entered in the Domain\username format.
6. If your server is an Exchange Server, you’ll have the option to Enable SSL.
7. The user account used to configure the Exchange organization must have appropriate
impersonation rights to back up and restore Exchange mailboxes. Select Grant Impersonation
to provide the account with this privilege.
Note:
If this option is not selected, you can only back up and restore the mailbox of the user whose
email address has been used to configure the Exchange organization.
8. Click Save.
High availability
High availability refers to a system or component that aims to ensure an agreed level of operational
performance for a higher-than-normal period. AD360 helps administrators maintain high availability
even in the case of failure of the primary server.
For more instructions on enabling high availability, refer this guide.
Reverse proxy
You can make AD360 act as a reverse proxy server for the products that you’ve integrated with it.
AD360 lets you enable a context-based reverse proxy, a port-based reverse proxy, or both.
For more information, refer this guide.
Enabling SSL
You can enable SSL for AD360 by going to Admin > General Settings > Product Settings.
For individual components, go to the Admin tab of the respective components and enable SSL.
16 / 24 www.manageengine.com/active-directory-360/
Database migration
For AD360
In AD360, you can change the built-in database server (PostgreSQL) to MS SQL Server or another
instance of a PostgreSQL server.
Prerequisites
For MS SQL database
Copy the bcp.exe and bcp.rll files from the directory in which the SQL Server is installed and paste
them in the AD360 bin folder (<AD360_installed_directory/bin).
Location of the bcp.exe file: <MSSQL_installed_folder>\Client SDK\ODBC\130\Tools\Binn\bcp.exe.
For example, C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\bcp.exe.
Location of the bcp.rll file: <MSSQL_installed_folder>\Client SDK\ODBC\130\Tools\Binn\
Resources\1033\bcp.rll. For example, C:\Program Files\Microsoft SQL Server\Client SDK\
ODBC\130\Tools\Binn\Resources\1033\bcp.rll\
For migration to MS SQL, please install the corresponding SQL Native Client in the AD360
machine as per the MS SQL Server version.
2005 Download
2008 Download
2008 R2 Download
2012 Download
2014 Download
2016 Download
2017 Download
2019 Download
If a firewall is enabled in the MS SQL Server machine, the TCP and UDP ports must be opened.
17 / 24 www.manageengine.com/active-directory-360/
For External pgSQL databse
18 / 24 www.manageengine.com/active-directory-360/
Auto backup
AD360 can automatically back up its database and the databases used in the integrated components
at regular intervals according to the schedule you choose. Using this option, you can back up the built-in
PostgreSQL DB or external PostgreSQL and MS SQL databases configured in the product.
3. Select whether you want to schedule the backup daily, weekly, or monthly and at what time
from the Backup Frequency drop-down.
4. Enter the number of incremental backups to take for every full backup in the Full Backup after
__ incremental backups box. Enter 0 if you want to take only full backups.
19 / 24 www.manageengine.com/active-directory-360/
5. Enter the Backup Storage Path.
a. You can either choose a local folder or shared folder to store the backups.
b. If the shared folder you’ve chosen needs permission to store the backups, then check the
box next to Authentication Required, and enter the necessary credentials.
Note 1�
If the shared folder is located in a workgroup computer, then create a new domain account in AD.
This new account should have the same username and password as that of a local account in the
workgroup computer. Use the credentials of this new account for authentication.
Note 2�
If the specified path is wrong or unreachable, the backup will be stored in the default backup
folder (<Installation_Folder\Backup>).
6. Set a retention period for the backup files from the Maintain Backup Files drop-down.
7. Click Save.
Other settings
1. To disable auto backup for AD360 or a particular integrated product, click the <delete >icon
located in the Actions column of the auto backup configuration table.
2. To get the status of the latest backup, click the <refresh> icon.
3. To edit the backup schedule for a particular component, click the <edit> icon located in the
Actions column of the component.
4. Use the Backup Now option to initiate a backup instantly.
5. Use the Recent Backups icon in the status column to view all available backups.
20 / 24 www.manageengine.com/active-directory-360/
Restoring backups from an old version of MS SQL Server to a
new MS SQL Server
If you've installed a new version of MS SQL Server and want to configure it in AD360 or in its integrated
components in place of the old MS SQL Server, you can use the backup you've taken using AD360.
Just note that, besides the backup you've taken using AD360, you need to copy the files in
<MS_SQL_Old_Version>/Backup to <MS_SQL_New_Version>/backup.
Troubleshooting tips
If you get an error while backing up the database, please check whether:
Auto update
Enable this to automatically update AD360.
21 / 24 www.manageengine.com/active-directory-360/
Alternatively, you can configure the auto-update settings by following the steps listed below:
22 / 24 www.manageengine.com/active-directory-360/
Mail server and proxy settings
Under Server Settings, you can configure the proxy settings in case you are using a proxy server and
configure the mail server to send notifications from the product. The following settings can be found here:
Mail Settings
Proxy Settings
Mail Settings
Navigate to Admin > General Settings > Server Settings.
Under the Mail Settings tab, the settings are divided into two sections:
Configure Mail Server
Notification Settings
Notification Settings
To notify the admin when the license is about to expire, check the box next to the Enable License/AMS
Expiry Notification field.
1. To notify the admin when the application shuts down unexpectedly, check the box next to the
Enable Downtime Notification field.
2. Click Save Settings.
23 / 24 www.manageengine.com/active-directory-360/
Proxy Settings
1. Navigate to Admin > General Settings > Server Settings.
2. Click the Proxy Settings tab.
3. Select the Enable Proxy Server option.
4. Enter the Server Name or IP and Port Number of the proxy server in the respective fields.
5. Enter the username and password for accessing the proxy server.
6. Click Save.
Alternatively, you can change the proxy settings by following the steps listed below.
Support
To get a personalized demo of AD360� To get a customized quote for AD360�
24 / 24 www.manageengine.com/active-directory-360/