Forum Discussion

arpydays's avatar
arpydays
Icon for Nimbostratus rankNimbostratus
May 22, 2016

Minimum AD privileges for APM acct

Hi,   we need to allow for VPN users on APM to be able to change AD password (via tickbox on logon page) and also enter new password when it expires. I've read sol15008, which states;   The us...
BIG-IP Access Policy Manager (APM)
security
Andrew_Husking's avatar
Andrew_Husking
Icon for Cirrus rankCirrus
May 23, 2016

We have our service account setup with Domain Users only.

 

The changing of passwords is done by the user account itself, so we've never had issues.

 

And by default domain users can read all attributes, so unless you've changed the default security permissions on AD, you should be fine.

 

Cheers

 

Related Content