The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Register Microsoft Active Directory

Prev Next

If you are sourcing Drive Encryption users from Active Directory, it is necessary to register Microsoft Active Directory with ePO - On-prem before you can create Drive Encryption users. Make sure to note that you can also create users using the User Directory feature, which removes the dependency on LDAP server.

You must have administrator rights to modify the server settings, permission sets, users, and registered servers.

For details about product features, usage, and best practices, click ? or Help.

  1. Click Menu → Configuration → Registered Servers, then click New Server to open the Registered Server Builder wizard.

  2. From the Server type drop-down list on the Description page, select LDAP Server, specify a unique user-friendly name and any details, then click Next.

  3. On the Details page:

    1. Select Active Directory from LDAP server type, then enter the Domain name or the Server name.

      Note

      Use a DNS-style domain name, and make sure that ePO - On-prem is configured with appropriate DNS settings and can resolve the DNS-style domain name of the Active Directory. The server name is the name or IP address of the system where the Microsoft Active Directory is present.

    2. Enter the user name for Active Directory accounts in this format: domain\Username.

    3. Enter the password and confirm it.

    4. Click Test Connection to test if the connection is successful, then click Save.