User Control - Active Directory Logins

🔑 Overview

Enabling Active Directory Authentication allows GGP to manage user accounts via the Active Directory forest. This eliminates the need to manually add or remove users in the GGP user table.

---

⚙️ Setup Instructions

To enable AD logins:

1. Open your Lock.INI file.

2. Under the [General] section, add the following line:

ActiveDirectoryAuthentication=True

📄 See also: Lock.INI

---

👥 Template Users

When a new AD user logs into GGP, the system checks for a Template User to base their settings on.

• A Template User is an account in GGP with a LoginID that matches part of the user's AD Distinguished Name (DN).

• The template with the most matching terms from the user's DN will be used.

🔍 Examples:

Template LoginID	Matches DN Example
DC=ggp,DC=local	Matches any user in the domain
OU=MyGroup,DC=ggp,DC=local	Matches users in MyGroup OU only

✅ Recommendation: Use descriptive names like Planning Admin Template for template accounts.

---

🆕 New User Creation

• When a new AD user logs in, GGP auto-creates their user account.

• The new account inherits settings from the matched Template User.

• Admins can later customise the user's settings as needed.

---

🚫 Deactivation

If an AD account is:

• Deleted, or

• Deactivated

That user will no longer be able to log into GGP.