Skip to main content

How to configure external (AD/Entra ID) users

Marking a User as External

You can mark an employee as an external user. An external user is a user imported from the Active Directory/Entra ID and not added through the Teramind Dashboard.

You can do so from the Employees screen:

1. Click on an employee’s name (in this example, "Aymon Cousteau") to open the Employee Details page:

2. Click the Edit button. The Edit Profile panel will open on the right side of the screen:

3. Select the Account tab

4. Enable the External User option to designates this user as an Active Directory user. By default, their domain password will be synchronized from Active Directory using LDAP. However, an additional option, Don't synchronize from LDAP, will appear when you enable the External User option. If you enable this second option, the following will happen:

  • The user's password will no longer be synchronized.

  • The "New Password" option will not be visible when you subsequently edit the user.

  • The "Forgot your password?" option on the Dashboard login screen will also not function for these users.

If you are using the LDAP confirmation method for authenticating dashboard changes, you must mark the user as an "External user."

Using a Terminal Server to Monitor External Users

You can set up a terminal server and install a single Teramind Agent to monitor all users on that server. This is an ideal solution if you wanted to monitor third-party vendors and other external users separate from your employees. Contact [email protected] if you need help monitoring users on a terminal server.

Did this answer your question?