Articles in this section

Print

(Legacy) KB20150513-1 Cayosoft Suspend Installation FAQ

  • Updated
Follow

Published: April 12, 2015
Updated: 12/1/2015
Applies to: Cayosoft Suspend 1.0 or later

Cayosoft® Suspend™ quickly and accurately secures Active Directory Users or Groups by performing the best-practice steps required to safely deactivate the objects thereby preventing costly security and compliance violations.

Important: Starting from Cayosoft Administrator version 10.3, the Suspend Tool was migrated to Administrator Service with significantly improved functionality. All default suspend configuration settings are now in the Administrator Console in the new 'Suspend Configurations' node.

Suspend Installation FAQ

Q: What permissions are required for user who performs installation?

For the first installation, membership in either Domain Admins of root domain or Enterprise Admins is required.

Q: Is the Active Directory Schema Extended by Cayosoft Suspend?

No - Cayosoft Suspend uses only existing Active Directory attributes and so no new schema extensions are added.

Q: What is being done in Active Directory?

In order for the Active Directory Users and Groups snap-in to function properly, two display specifier values must be updated. These are found in the AD configuration node located at CN=409, CN=DisplaySpecifiers,CN= Configuration,DC=yourdomain,DC=com.

The two values are updated are:

  1. cn=user-Display 
  2. cn=group-Display

The following value is added to the adminContextMenu attribute: "0,{DC3123CC-3E08-4347-BC16- 743019E8DB8A}"

Q: How can I add the ADUC Display Specifiers manually?

  1. Open ADSIEdit (press the Windows+R keys to open the Run dialog, type adsiedit.msc, press Enter)
  2. Click Action in top menu, and then click Connect to… item
  3. In Connection Setting dialog under Select a Well known Naming Context choose Configuration option and then click OK
  4. In the left pane, expand Configuration > CN=Configuration,DC=domain,DC=com > CN=DisplaySpecifiers > CN=409
  5. Find display specifier with name CN=user-Display
    a. Double-click to open the display specifier properties
    b. Double-click on adminContextMenu attribute
    c. Add value: "0,{DC3123CC-3E08-4347-BC16-743019E8DB8A}" and click OK in String Editor
    Click Ok to close Attributes dialog
  6. Modify group-display specifier same way as you do for user-Display
  7. Close ADSIEdit tool.

Q: Can Cayosoft Suspend be used without adding Display Specifiers?

To simplify the operation and ensure reliability display specifiers must be present. It is possible to use Cayosoft Suspend through the Cayosoft Administrator Web Admin Portal, without adding the Active Directory display specifiers, but doing so requires special configuration and should only be done by Cayosoft on the customer's behalf.

Q: How can I generate a log during Setup?

msiexec /i "C:\MyPackage\Example.msi" /L*V "C:\log\example.log"

 

Related Articles

KB20141107-1 Export configuration settings for Suspend and Undo Suspend rules

KB20180621-1 Configure Scheduled Suspend and Undo Suspend rules

KB20170313-1 How to Reset The Cayosoft Suspend Configuration

 

If you have additional questions please contact Cayosoft support here.

Related articles

Comments

0 comments

Please sign in to leave a comment.