Master Account Holders can import Active Directory users as Rescue technicians into their organization. Key user data in Rescue will be automatically updated when those change in Active Directory.

1. Generate a service token and default password for new users in the Admin Center.
   1. Select the Global Settings tab.
   2. To generate a service token, click Generate and Copy under Active Directory Synchronization.

      Result: A service token is generated and copied to your clipboard.

   3. Define the default password you want your new technicians to use for their first login.
      Note: Users are required to change this password upon their first login.
   4. At the bottom of the page click Save.
2. Download and extract the server application.
   1. In the Rescue Administration Center, under Active Directory Synchronization, click Download to download the service installer.

      Result: The service installer is downloaded to your computer in a zip file.

   2. Extract the zip file to a folder.
3. Run the server application, and configure synchronization behavior.
   Important: You need privileges to run the application as a system service. The computer running the application must be connected to Active Directory with sufficient permissions to access and query all Active Directory groups and users.
   1. Select the Microsoft AD service to be used.
   2. Submit the following credentials:
      • Master Account Holder Rescue credentials
        • Email
        • Password
      • The service token you previously generated on the Global Settings tab of the Admin Center.

      Note: By checking Dry Run mode, you can preview the changes the service will make in your Rescue hierarchy tree.
   3. Click Next.
      Note: The application runs in Admin mode.
   4. Enter the Active Directory domain from which you want to import users, and click Next.
4. Select the Technician Groups you want to synchronize.
   1. Click the Technician Groups radio button under Technician Groups/Admin Groups
      • The first column contains the AD Groups, select one Active Directory group you want to synchronize with a Rescue Technician Group.
      • The second column contains the Rescue Technician Groups, select one group that will be synchronized with the AD group.
   2. Click the arrow button pointing to the third column to finalize the selection.
      Note: If you want to select multiple groups, repeat step a. To cancel synchronization between two groups, select them in the third column, and click the arrow pointing towards the second column.
   3. Click Next.
   4. Enter a search criteria (for example 'support').
   5. Enter a search term (for example 'aid').

      Result: AdSync searches for this term between the configured AD groups.

   6. Select Yes in the confirmation pop-up window to continue with the synchronization.
      Note: If you connected at least one Active Directory Group to a Rescue Technician Group check an option under Global settings to define the behaviour of the synchronized group.
   7. Select the Group settings for Technician Groups:
      • Mobile license: a mobile license is assigned to the members of the group, if available.
5. Select the Admin and Master Admin Groups you want to synchronize with your Azure groups.
   1. Click the Admin Groups/Master Admin radio button under Technician Groups/Admin Groups
      • The first column contains the AD Groups, select one Active Directory group you want to synchronize with a Rescue Admin Group.
      • The second column contains the Rescue Admin Groups, select one group that will be synchronized with the AD group.
   2. Click the arrow button pointing to the third column to finalize the selection.
      Note: If you want to select multiple groups, repeat step a. To cancel synchronization between two groups, select them in the third column, and click the arrow pointing towards the second column.
   3. Click Next.
   4. Enter a search criteria (for example 'support').
   5. Enter a search term (for example 'aid').

      Result: AdSync searches for this term between the configured AD groups.

   6. Select Yes in the confirmation pop-up window to continue with the synchronization.
      Note: If you connected at least one Active Directory Group to a Rescue Admin Group check an option under Global settings to define the behaviour of the synchronized group.
   7. Select the Group settings for Admin Groups:
      • Mobile license: a mobile license is assigned to the members of the group, if available.
6. Click Next.
7. In the resulting pop-up window click Yes to continue with the synchronization.
8. Select how AdSync will run:
   • Start Active Directory Snychronizer as a service.
   • Start Active Directory Snychronizer as a Windows terminal application.
     Important: If you run synchronization as a Windows terminal application, do not close the appearing terminal window.
9. If the installation was successful, click Finish, and close the installer.

   Result: The service application is installed as a Windows service provisioning users belonging to the selected Active Directory group(s) to the selected Rescue Technician Group(s).

   Restriction: It is not possible to delete a technician from the LogMeIn Rescue Admin Center by using the Active Directory synchronization service. When a user is deleted or moved in Active Directory, the corresponding LogMeIn Rescue technician is disabled.
   Note: If a technician is moved to another LogMeIn Rescue Technician Group, subsequent synchronization will only update the user's status, but will not move the user back to its initial synchronization group.
   Note: If a user is disabled, deleted, or moved in Active Directory, the technician's mobile license is freed up, and becomes available for other members of the LogMeIn Rescue organization.
   Tip: If the synchronization service fails, you can get an error log by clicking Active Directory Logger at the bottom of the Active Directory Synchronization section on the Global Settings tab of the Admin Center.