Changing ESM from Internal Authentication to Active Directory

Issue:

ESM is currently using Local Authentication and the user would rather use the existing Active Directory environment to provide authentication.

Solution:

1. Open up SQL Management Studio and backup the following databases (if they exist).

ESM5_2
ESM5_2_Central
aspnetb

More information here: Backing up Databases

2. Uninstall the current version of ESM. Navigate to control panel, add/remove programs and choose to uninstall ESM. Follow uninstall on screen instructions.

3. Reinstall ESM. Run the installer. All of the information should autofill correctly except for the authentication page. Be sure that you choose "Active Directory" and fill out the next 2 boxes appropriately.

For example, the FQDN needs to be entered like the following:
3 Examples

ipconfigure.com
CityJail.local
ABCorp.net

Note: The Fully Qualified Domain Name can be found by running the "whoami /fqdn" command from the command line.

Next, we need to input the group name that will belong to all the administrative logins. Be sure to preface the group with the domain.
3 Examples

ipconfigure\ESM_Admins
CityJail\Administrators
ABCorp\VideoAdmins

4. Once the installation is complete and the server has restarted, open up SQL Management Studio. Press connect and expand the tree on the left. Databases > ESM5_2_Central > Tables. Right click on dbo.tblGroup and choose "Edit top 200 rows".

On the right hand side, under column 2 where it is titled "GroupName" change it from "Administrators" to the group name you used in the installer. For example, "ipconfigure\ESM_Admins" and then press enter.

5. Navigate to Services and restart the "IPConfigure Portal Service.

6. Open a CMD windows as administrator and run the "IISRESET" command. (no quotes)

You should now be able to login using active directory accounts followed by the FQDN. For example, a valid login would be "admin@cityjail.local or admin@ipconfigure.com"

If you continue to have login trouble or you have any additional questions, please submit an ESM Technical Support request.