Initial Configuration Wizard

Content: 

Initial Configuration Video

Overview

Welcome page

Select Extensions page

Configure Active Directory page

Configure Microsoft Exchange page

Configure Microsoft Microsoft 365 page

Configure General Settings page

Configure Microsoft Skype Server page

Initial Configuration Video

Overview

After you installed the Cayosoft Administrator, when you run it for the first time, you need to complete the Initial Configuration wizard.

This wizard will walk you through the first-time setup. Some options are mandatory and you will be asked to provide the necessary information to continue. Other options are optional and may be skipped.

Each time you click Next the wizard will verify the settings you have provided and will prompt you if there is a problem.

Welcome page

Run Cayosoft Administrator after the first time setup - Initial Configuration wizard will appear:

Enter an email address where system notifications and alerts will be sent. Typically this is the email address of the person responsible for configuring Cayosoft Administrator.

If you install Client Tools only and Administrator Service is installed on another machine please see this article: How to install the Cayosoft Administrator Console on an Admin's Workstation – Cayosoft Help Center.

Select Extensions page

Depending on your environment, select the extensions that should be enabled.

* - Please, see KB20180323-1 article for additional configuration steps you might need to perform.

If you also need to manage objects in the Microsoft Skype server, check Active Directory and Microsoft Skype Server Extensions.

The next pages of Initial Configuration Wizard will depend on selected extensions.

Configure Active Directory page

Active Directory extension settings are used in rules and actions related to Active Directory.

By default, all domains from the forest where Cayosoft Administrator is installed become enabled. All trusted domains are added as disabled. You can enable them if you need to.

Add... - add a new trusted or untrusted forest with its' domains for management. 

Discover - add missing domains to the forests that are specified in the Managed Domains table.

Clear - remove all domains and forests that were added manually.

Active Directory domain credentials - to configure Active Directory extension, specify credentials for Active Directory domain administrator account. For more information, please see the Permissions required for the Active Directory management article.

Domain - check all domains that you need to manage.

DC -  it is automatically selected during initial discovery, using the DC Auto selection method.

Alternative DC - you can set another DC to use in case primary DC is identified as unavailable. 

Credential -  by default, the value is set to <Use Default Credentials>, which points to Active Directory domain credentials.

All managed domains are grouped by forests:

1. All domains from the forest where Cayosoft Administrator service is installed.
2. All trusted\untrusted domains.

Click Configure to verify Forest Settings.

Default Country/region - depends on region settings. You can change it if you need.

Configure Microsoft 365 page

Microsoft 365 extension settings are used in rules and actions related to Microsoft 365.

Microsoft 365 credentials

To configure Microsoft 365 extension, specify credentials for Microsoft 365 account. You can create a new connection account or use an existing one. 

Create a new connection account 

1. Specify user account name. 
2. Copy autogenerated password or set it to your own value.
3. Click Create to create a connection account in Azure AD with the name and password specified above. The created account will be added to the required administrative roles by Administrator Service automatically.
   When prompted to sign in to Microsoft 365 sign with an account that has Global Admin or similar permissions.
4. Click Grant to allow Cayosoft Administrator API Access application to access your tenant under the created connection account. Use the created account credentials when prompted.
5. Ensure Microsoft 365 connection account is excluded from the Multi-Factor Authentication (MFA).
   If you are enforcing MFA with Conditional Access Policies (CAP), please ensure the created connection account is excluded from these policies. For more information see Troubleshooting Conditional Access Policy enforcement on Microsoft 365 Connection Account – Cayosoft Help Center.
6. You can click Run What If on Azure Portal to check if CAP impacts the connection account.
7. Click I confirm the created connection account is excluded from CAPs.
8. Click Create.

Use existing account

If you use an existing Microsoft 365 connection account you should ensure that this account meets the requirements listed on the product. For more information see Permissions required for AD and MS 365 accounts used by Cayosoft Administrator – Cayosoft Help Center.

1. Specify user account name.
2. Specify user account password.
3. Click Ok.

Admin Consent

Important: To continue the Initial Configuration Wizard, you must register the Azure application. Otherwise, you will get the error.

1. Click Register Azure Application. 
2. Click Grant. If you created a new connection account the consent will already be granted.
3. Click Refresh to be sure that admin consent was granted

Microsoft 365 user name suffix

By default, this suffix is taken from the account specified in the Microsoft 365 credentials. You can change it if you need. This suffix will be used as a default suffix in the new Microsoft 365 objects creation.

Default Usage Location

Default usage location depends on region settings. You can change it if you need. This location will be used as a default in the new Microsoft 365 objects creation.

Advanced Settings

You can select Azure Environment. If your tenant has another Azure environment parameter than the default value AzureCloud, you need to specify this value for a successful connection.

Troubleshooting Microsoft 365 connection issues

How to grant admin consent to Azure APIs and connect to the Microsoft Graph API

Cayosoft Azure Admin Consent for Microsoft Graph API Assignment Details

KB20180503-1 Troubleshooting connection to Microsoft 365

KB20180823-1 Troubleshooting Cayosoft Administrator Grant Consent

Configure Microsoft Exchange page

Use these settings to configure Microsoft Exchange extension:

Exchange Credentials - To configure Microsoft Exchange specify credentials for Exchange Server administrator and connect URL. For more information, please see Permissions required for Exchange on-premises management article.

Connect URI - specify the Exchange server name.

Troubleshooting Exchange Server connection issues

KB20170323-1 Troubleshooting Cayosoft Administrator Exchange On-premises Connections

Configure General Settings page

Сonfiguring SMTP settings is not mandatory but is used when rules or actions send e-mail messages or e-mail reports.

For more details, see Configuration of Cayosoft Administrator SMTP server settings.

Configure Microsoft Skype Server page

Microsoft Skype Server extension settings are used in rules and actions related to Skype Server.

Skype On-premises credentials - to configure Microsoft Skype Server extension, specify credentials for Skype Server Administrator account. This account should have Active Directory domain administrator permissions. For more information, please see Permissions required for Active Directory management article.

Connect Uri - specify the Skype server name.

Maximum return results - the maximum number of users returned from the Skype server.

Default Registrar Pool - This pool is responsible for authenticating the user and for keeping track of his or her current status and location. Skype server registrar pool used in Cayosoft Administrator automation rules by default.

Default SipDomain -  SIP domains are domains authorized to send and receive SIP traffic and are used when assigning SIP addresses to users.

Active Directory Domain Controller - FQDN of the Active Directory Domain Controller used to establish a connection to the Skype server.

Change History