Active Directory Client Extensions
[ADCE]

Making Windows behave well on VPN / WiFi connected remote computers

sampleFrequently Asked Questions

 

Which Windows Operating System versions are supported ?

Windows 2000 Professional, Windows XP, Windows Vista and Windows 7.0, x86 and x64 platform.

What are the requirements for installing AD Client Extensions ?

Microsoft .NET Framework 2.0 or better

How is the software deployed ?

The software package is in .MSI file format and deployed by the Windows Installer engine.  It can be deployed using MS SCCM, LAN Desk Manager and other popular software distribution software suites.  One can also leverage GPO based software distribution method to deploy the software.

Do the offline users get notified about password expiration date ?

Yes. Offline users will see the password expiration date that was retrieved when they were last connected to the corporate network.

I have users who log into their workstations using their local account. They access network resources using a designated domain account.  Do they get notified about password expiration date and they are able to change their domain password ?

Yes. Users logging into their workstation are also notified about password expiration and are able to change their passwords.  This feature is configurable under Preferences, using the Isolated Client option

Are the cached credentials synchronized with the domain credentials ?

Yes.

When are the Group Policies refreshed ?

Immediately after the VPN connection is established to the corporate network, the group policy objects are refreshed.   The administrator can also force all Group Policy settings to update, even if they have not changed.

When does the user logon script run ?

ADCE will launch the User Logon Script specified in User Properties once every day and when the VPN connection is established.  The administrator may choose to have the User Logon Script execute every time VPN connection is established.

How does one configure ADCE settings ?

ADCE default installation will get you started with the core features i.e. Password Change notification, Group Policy refreshes, User Login Script execution, Kerberos ticket refreshes. 

In order to customize the settings for other features, the administrator may choose to edit GPO using the Administrative Template provided with the software.

  1. Launch GPMC.MSC.  You may have to download and install GPMC from Microsoft site.

  2. Select the domain or an OU that contains the computers you wish to manage with ADCE.

  3. Create a new GPO or edit existing GPO if that is more appropriate for your environment.

  4. Right mouse click on the GPO you wish to manage and select 'Edit'. This will launch the Group Policy Editor.

  5. Expand the treeview under Computer Configuration

  6. Select 'Administrative Template'. Right mouse click on it and select 'Add /Remove templates'

  7. Browse to folder containing the .adm file. Typically, all .adm files are stored under \Windows\INF folder.  You can also load the .adm file from the folder where the .adm file is extracted.

  8. In Group Policy Editor, expand the "SYNERGIX AD Client Extensions" branch and configure the settings as appropriate.

    • Refer to the *Explain* tab of the Group Policy settings for more details on specific GPO setting

  9. Close out Group Policy Edit and Group Policy Management Console