KRMC Hosted - Active Directory Service Setup

Kanguru Hosted Premium accounts have the ability to integrate their Active Directory (AD) accounts with KRMC.  In performing this integration, you are able to sync the user accounts with the email addresses assigned to each of your drives on KRMC.  If a user on your AD has been disabled, this service will indicate to KRMC of this change and any drive with that email address assigned to it will automatically have one of two actions generated for it.

The options available are as follows:

• Create Disable Device Action
• Create Disable Device and Reset for New User

In order to use this feature you will need to ensure that each user on your AD has an email entered into their properties.  Without this completed, our service will not be able to send the email address to KRMC if the account is disabled.  Additionally, you will need to install the Kanguru AD Service (KADService) on a system on your Domain that will always be running.  This requirement is so the service can continue to check for user updates at all designated times.  KADService can be downloaded from our support site HERE. 

 

Prepare your KRMC Account

Before installing the Kanguru AD Service (KADService), you need to turn on the setting to enable connection to KRMC.

1. Log into your KRMC account by visiting KRMC Hosted .
2. On the left-hand side, go to the navigation bar and click “Settings”.
3. Under the Settings panel, open your server settings by clicking “Server Settings”.
4. Navigate to the bottom of the page by scrolling to the section labeled “AD Integration Device Disable”.
5. Click the option to “Enable AD Integration sync”.
6. If you click on the “Action type(s) created when email is marked as inactive”, you will have 2 options to choose from.
   1. Create disable device action: Disable a device when its owner’s account is disabled in Active Directory.
   2. Create disable device and reset for new user: Disable the device and reset it for use by a new owner when the previous owner’s account is disable in Active Directory.
7. When you are satisfied with your choices, click the “Update and Save” button below the settings.

Prepare your domain connected Windows Workstation

After KRMC is configured to listen for activity, we need to make sure all the software necessary is installed on your workstation.

You will need to install Visual C++ Redistributable, please install this application: https://aka.ms/vs/17/release/vc_redist.x64.exe

Installing the Service

Kanguru provides a Windows Service that needs to be installed to report disabled AD user’s email addresses to KRMC. The information is sent encrypted and only email addresses are sent to KRMC. Once the event is processed, all information leaves the server and waits until it receives a new event after the set time configured.

1. The service can be downloaded via compressed folder from the:

2. Save the compressed folder as desired and unzip the folder.

3. Run a PowerShell terminal as Administrator.

4. Navigate to the directory of the Kanguru Service you recently decompressed.

5. Inside you will find "KADServiceConfigTool.exe" and "KADService.exe".

6. Using your PowerShell terminal, navigate to the KADService directory using a change directory command.

• • For example: “cd C:\Users\<username>\Downloads\KADService”
  • Or use “Set-Location -Path  ‘C:\Users\<username>\Downloads\KADService’”

7. We are going to add the KADService.exe as a service on this computer by running the command “New-Service –Name KADService –Description “Kanguru Solutions Active Directory Sync Service” -BinaryPathName <path to KADService.exe>”.

8. You should see an output that says the service named “KADService” is stopped, the means the service was successfully installed.

9. At this point you can see the service when you open the Service Management window in your OS.

10. Now we will configure the KADService using the KADServiceConfigTool

11. Navigate to the KADServiceConfigTool folder in your decompressed folder.

12. Double-click the executable KADServiceConfigTool.exe to launch the tool.

13. Once the configuration tool is open please input your Active Directory domain name into the corresponding field.

AD Domain Name	This is the name of your Domain  for which you will be checking for updates.
KRMC URL	For KRMC Hosted, the URL that you should enter is https://krmc.kanguru.com.
KRMC ID	This is the Server ID for your Super Administrator (SA) account.  For information on how to locate your Server ID either refer to Account Activity Icons or Account Information.
Execution Interval	This is the number of minutes that the service will check for any changes that may have occurred. The default is set for 60 minutes (1-hour).
Send Updates Only	When selected, previous batches sent to KRMC are stored in system memory and only changes are sent to KRMC.  This is useful if you are looking to quicker batches to be sent to KRMC however we commonly recommend not having this option selected.
Configure Service	This saves the configure settings entered here.  You can change these settings at a later point by running KADServiceConfigTool.exe again.

14. Close the configuration tool window.

15. To start your service, you can run the PowerShell command “Start-Service KADService”, the resulting output should show the service is running.

Uninstalling the service

If you ever need to uninstall KADService, you can follow these steps:

1. Open up PowerShell as an Administrator.
2. If you have a newer version of PowerShell (version 6 or higher), you can use “Remove-Service KADService”
3. Otherwise, use “sc.exe delete KADService”
4. The service should now be uninstalled.

Getting Logs for Troubleshooting

The logs are located in C:\ProgramData\Kanguru\ADService\ , the logs files are unencrypted but do not contain any identifiable Active Directory information.

For more information on KRMC Hosted, please refer to the User Manual located at HERE.