MachPanel Knowledgebase

Duplicate records causing problem in AD Org Or User listing display

rehan_waseem — Wed, 28 Aug 2024 08:31:36 GMT

Summary

This article provides information about, how to fix the issue of AD organization or AD User listing due to duplicate records exists in the database.

Applies To

MachPanel v7 and above

Issue Details

We have optimized AD Org and User listings by pre-processing records and keeping them in new table. It should work for clients but at times clients have some garbage/duplicate records that can break things and error can be seen on AD Organization or AD User listing like below:

Resolution

Below queries can be used to find duplicates in ADUser and Mailbox table, have to remove and keep only 1 working record in specific table:

--Duplicate in ADirUsers, if found have to keep one record for 1 LDAP url.

Select * from HB_tblADirUsers
Where UserLDAPURL in
(
Select UserLDAPURL from HB_tblADirUsers
Where ADUserID not in (Select ADUserId from HB_tblADirUserGroupJobs Where StatusId not in (2,3))
and UserLDAPURL!=''
Group By UserLdapURL
Having Count(UserLDAPURL) > 1
)
order by UserLDAPURL asc
GO

--Duplicate in tblExchangeMailboxes against UserLDAP, if found have to keep one record for 1 LDAP url.

Select * from HB_tblExchangeMailboxes
Where UserLDAPUrl in
(
Select UserLDAPURL from HB_tblExchangeMailboxes
Where MailboxID not in (Select AccountId from HB_tblExchangeGroupJobs Where AccountType=0 and StatusId not in (2,3))
and UserLDAPURL!=''
Group By UserLdapURL
Having Count(UserLDAPURL) > 1
)
order by UserLDAPURL asc
GO

--Duplicate in tblExchangeMailboxes against ADUserId, if found have to keep one record for 1 ADUserId

Select * from HB_tblExchangeMailboxes
Where ADUserID in
(
Select ADUserID from HB_tblExchangeMailboxes
Where MailboxID not in (Select AccountId from HB_tblExchangeGroupJobs Where AccountType=0 and StatusId not in (2,3))
Group By ADUserID
Having Count(ADUserID) > 1
)
order by MailboxID asc
GO
Once all duplicates are removed, run below script:

Declare @RowsCount int
Set @RowsCount = 1
while @RowsCount != 0
Begin
                Exec CSP_UpdateHostedOrgExtendedData
                Set @RowsCount = @@ROWCOUNT
End
GO

Declare @RowsCount int
Set @RowsCount = 1
while @RowsCount != 0
Begin
                Exec CSP_UpdateHostedUserExtendedData
                Set @RowsCount = @@ROWCOUNT
End
GO

Important: Rules to follow when deleting from aduser:

If AdUser has 2 different CustomerId, keep the record which has highest value for ADUserId.
If CustomerId is same, check for ADUserid in Mailbox table, keep record which is in mailbox table.
- If no enterprise service enable on ADUser, keep latest record.

WebHelp/Manual for ADSync v6

mudesira.munir — Mon, 04 Dec 2023 11:48:24 GMT

Summary

It is an ADSync Web Help which provides information on how to Install and Configure ADsync.

Applies To

This article applies to MachPanel Build v7 and ADSync v6.

ADSync Manual

For online viewing click on this link. View the ADSync Web Help.
Please download ADSync Help files in PDF & CHM format:

ADSYNC Installation Guide.pdf
ADSync Installation Guide.chm
- If CHM files are blocked do following:
1. Windows 10: Run Windows Explorer, right-click on the CHM file, and select Properties from the popup menu. Click on the Unblock button immediately below the Advanced button on the General page. Click Apply to show the content. Once the CHM file has been unblocked, the Unblock button disappears.
2. Mac: Download CHM reader and open CHM files.

Guide for Installation and Configuration of ADSync

mudesira.munir — Mon, 04 Dec 2023 11:32:19 GMT

01. Download ADSync Tool From MachSol Customer Portal

02. WebHelp/Manual for ADSync v6

03. ADSync – Installation Guide

04. ADSync – Configuration Guide

05. Add ADSync Templates

06. Logging Supported by ADSync

07. ADSync Important Notes and Troubleshooting

08. ADSync Utility Update to v6.0

09. Remove and Disable ADSync

ADSync Utility Update to v6.1 (Updated 15 July 2025)

mudesira.munir — Tue, 21 Nov 2023 06:12:06 GMT

Summary

This article provides information on how to update ADSync tool to latest v6.1

Applies To

This article applies to ADSync v4.3 or v5.0 or v5.1

Procedure To Update:

You can directly update from v4.3/v5.0/v5.1.0.0 to v6.1 using this update.

You will need to download the ZIP file from link given at bottom of this article, Ensure the Zip file is "Unblocked"/"Unlocked" by checking from file Properties. Then Extract and use the appropriate x64 or x86 files based on your server OS.

There are two options:

a. Auto update: If you want to let the update process run automatically, please run ADSync.UpdateInstaller.exe from the extracted files. Please use "Run as Administrator" option. It will perform couple of reboots on its own to complete the update. Also, you need to run registry file (ADSync.PolicyLogger.reg) from update directory once update process is completed.

b. Manual update: To Update manually please follow below steps:

Remove entry “ADSyncPolicy” from “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Reboot Domain controller.
Replace “ADSyncPolicy.dll, ADSync.PolicyLogger.dll and ADSync.ClientHelper.dll” files in "$windir\System32".
Stop ADSyncSvc using Services.
Replace "ADSync.ClientHelper.dll, ADSync.ConfigStudio.exe and ADSyncSvc.exe" in installation folder of ADSync
Example "C:\Program Files\MachSol\ADSync".
Add entry “ADSyncPolicy” to “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Double click or run “ADSync.PolicyLogger.reg” file to update the linked assembly version in windows registry.
Reboot the machine.
Repeat Step 1-8 for all additional/secondary/backup domain controllers.

Improvements / New Features

Updated ADSync Configuration Studio UI
Purge Logs Feature after selected number of days
Resync Option to sync all users/groups regardless of their previous sync state.
Captured password hashing improvement.
Other performance related improvements.
Auto Create new option is dependent on ‘Auto Mapping’. In fact it is extension of Auto Mapping where system automatically creates new user on hosted side.
UPN in hosted user's display in mapping screen
Auto Mapping on Exact Display Name when there's only one hosted user matches Display Name.

Home Page:

Settings:

Profiles:

Sync:

Sync button will only sync recently updated groups/user data.

Resync:

Resync will sync all users/groups data (Just like from beginning). Doesn't matter that the user/groups is recently updated or not.

Download link for ADSync Update Files: ADSync v6.1 (15 July 2025)

ADSync Utility Update to v5.1.0.0 HF2 (Updated 14th September 2023)

rehan_waseem — Thu, 27 Jan 2022 18:18:31 GMT

Summary

This article provides information on how to update ADSync tool to latest v5.1.0.0 HF2

Applies To

This article applies to ADSync v4.3 or v5.0

Procedure To Update:

You can directly update from v4.3/v5.0 to v5.1.0.0 HF2 using this update.

There are two options:

b. Manual update: To Update manually please follow below steps:

Remove entry “ADSyncPolicy” from “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Reboot Domain controller.
Replace “ADSyncPolicy.dll, ADSync.PolicyLogger.dll and ADSync.ClientHelper.dll” files in "$windir\System32".
Stop ADSyncSvc using Services.
Replace "ADSync.ClientHelper.dll, ADSync.ConfigStudio.exe and ADSyncSvc.exe" in installation folder of ADSync
Example "C:\Program Files\MachSol\ADSync".
Add entry “ADSyncPolicy” to “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Double click or run “ADSync.PolicyLogger.reg” file to update the linked assembly version in windows registry.
Reboot the machine.
Repeat Step 1-8 for all additional/secondary/backup domain controllers.

Improvements / New Features

Custom sync attribute for user sync
Security update to clear renewed password from cache on data upload.
User mapping screen/UI load time optimizations.
Configurable active directory user’s attribute for storage of sync information (previously it was fixed to ‘division’ attribute).
Clearance of stored password hash from cache (storage attribute) once data is uploaded to the hosted CP.
User mapping restricted on the basis of UPN only. (Previously it was considering display name too for mapping. It was causing mismatched mappings, hence removed).
Changed error message with more user friendly one when wrong admin credentials are specified.

Resolved / Fixed Issues

Handled error when there is no object in the OU selected for Sync in Client AD.

Download link for ADSync Update Files: ADSync v.5.1.0.0 HF2

ADSync Utility Update to v5.0

rehan_waseem — Fri, 11 Jun 2021 13:39:16 GMT

Summary

This article provides information on how to update ADSync tool to latest v5.0

Applies To

This article applies to ADSync v4.3

Procedure To Update:

a. Auto update: If you want to auto-update, please run ADSync.UpdateInstaller.exe, please use "Run as Administrator" option.

Also, you need to manually run registry file (ADSync.PolicyLogger.reg) from update directory once update process is completed.

b. Manual update: To update manually please follow below steps.

Remove entry “ADSyncPolicy” from “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Reboot Domain controller.
Replace “ADSyncPolicy.dll, ADSync.PolicyLogger.dll and ADSync.ClientHelper.dll” files in "$windir\System32".
Stop ADSyncSvc using Services.
Replace "ADSync.ClientHelper.dll, ADSync.ConfigStudio.exe and ADSyncSvc.exe" in installation folder of ADSync
Example "C:\Program Files\MachSol\ADSync".
Add entry “ADSyncPolicy” to “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Double click or run “ADSync.PolicyLogger.reg” file to update the linked assembly version in windows registry.
Reboot the machine.
Repeat Step1-8 for all additional/secondary/backup domain controllers.

Improvements / New Features

User mapping screen/UI load time optimizations.
Modern SSL certificates support for ADSync web service.
Windows service logon account change on configuration credentials change.
Exchange mailbox specific attributes sync (if MS Exchange is present at client side).

Resolved / Fixed Issues

Issue fixed for error in case of no users in selected OU for when adding new sync profile.

Download link for ADSync Update Files: (ADSync v5.0.0.0) Size: ~218KB

ADSync Utility Update to v4.3

mudesira.munir — Mon, 09 Dec 2019 15:32:00 GMT

Summary

This article provides information on how to update ADSync tool to latest v4.3.

Applies To

This article applies to ADSync v4.2

ADSync v4.3

ADSync v4.3 works with MachPanel 6.3.12 or later. To upgrade you need to perform following steps on each Domain Controller in Local AD.

For details about changes in build 6.3.12, please visit release notes https://kb.machsol.com/Knowledgebase/55615/MachPanel-Build-v6312-Release-Notes-Dec-10-2019

You will be able to perform update of your control panel server to 6.3.12 and schedule your ADSync customers to perform update to 4.3 at a later time. During this version mismatch between ADSync and MachPanel where ADSync is on version 4.1 or 4.2 and MachPanel is on version 6.3.12 the Sync Process will continue to work. Though this will work, but it is recommended to update ADSync clients to version 4.3 as soon as possible.

IMPORTANT: This version of Adsync supports latest TLS encryption protocols i.e. TLS1.1 and TLS1.2 are supported.

Procedure To Update:

a. Auto update: If you want to auto-update, please run ADSync.UpdateInstaller.exe, please use "Run as Administrator" option.

Also, you need to manually run registry file (ADSync.PolicyLogger.reg) from update directory once update process is completed.

b. Manual update: To update manually please follow below steps.

Remove entry “ADSyncPolicy” from “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Reboot Domain controller.
Replace “ADSyncPolicy.dll, ADSync.PolicyLogger.dll and ADSync.ClientHelper.dll” files in "$windir\System32".
Stop ADSyncSvc using Services.
Replace "ADSync.ClientHelper.dll, ADSync.ConfigStudio.exe and ADSyncSvc.exe" in installation folder of ADSync
Example "C:\Program Files\MachSol\ADSync".
Add entry “ADSyncPolicy” to “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Notification Packages“.
Double click or run “ADSync.PolicyLogger.reg” file to update the linked assembly version in windows registry.
Reboot the machine.
Repeat Step1-8 for all additional/secondary/backup domain controllers.

Download link for ADSync Update Files: (ADSyncUpdate4.3) Size: ~664KB

Known Issue:

If your panel is on build 6.2.10 and you updated your ADSync Tool to v4.3, you need to execute following script on Control Panel Database:

Insert Into [Hb_tblADSyncVersionMapping] (ADSyncVersion, CPVersion)
Values ('4000','6210'),
('4100','6210''),
('4200','6210''),
('4300','6210'')
GO

TechData Distributor (Indirect Partner) Integration

mudesira.munir — Wed, 22 May 2019 16:20:42 GMT

Summary

This article provides steps on how to Integrate TechData Distributor into MachPanel.

A client who resales or uses O365 Services via TechData Distributor can use MachPanel's TechData Integration to handle Sales, Billing and Management tasks.

Applies To

This article applies to MachPanel build v6.1.30 and later.

Tech Data Distributor Integration

Add TechData Distributor
- In Step-1, Add Distributor by navigating to the following path: Home > Service Director > Microsoft CSP Management > CSP Distributors
- Click Add CSP Distributor as shown below:

Provide distribution provider details.

Authentication End Point

Example for NL profile is: https://eauth.techdata.eu/as/token.oauth2

API End Point

Example for NL profile is: https://partnerapi.tdstreamone.eu

SOIN provided is for Reseller Signature Key

Reseller ID

TechData Reseller ID, it is a integer value of TechData Reseller Id of Client account.

TechData authorization link for transfer

Example for NL profile is: https://portal.office.com/partner/partnersignup.aspx?type=ResellerRelationship&id=[TechDataCSPTenantId]&msppid=[TechDataMPNId]&csp=1

[TechDataCSPTenantId] is GUID value of TechData partner CSP Tenant Id.

[TechDataMPNId] is integer value of TechData partner MPN Id.

Microsoft portal authorization link

Example for NL profile is: https://admin.microsoft.com/Adminportal/Home?invType=IndirectResellerRelationship&partnerId=[ClientCSPTenantId]&msppId=[ClientMPNId]&indirectCSPId=[TechDataCSPTenantId]&DAP=true#/BillingAccounts/partner-invitation

[ClientCSPTenantId] is a GUID value of Client CSP Tenant Id.

[ClientMPNId] is integer value of Microsoft MPN Id of client.

Distributor Listing
- Once it has been added as CSP Distributors it will appear in listing.

CSP profile Indirect partner option
- In Step-2, navigate to the following path: Home > Service Director > Microsoft CSP Management > Microsoft CSP Profiles
- Add the TechData Distributor in CSP Profile as Indirect Partner.

Indirect partner listing
- Click Save and you will be able to see the TechData under Indirect partner listing as shown below:

Sale of Azure and O365 is supported but Azure billing is not supported.
To manage O365 hosting, a user (Provider\Reseller staff or Customer) must input username and password by editing Tenant profile.
Custom domain handling is not supported, must be done in backend and synced in panel.

Partner of Tier 2 having no CSP Profile on Microsoft

mudesira.munir — Wed, 02 May 2018 07:23:31 GMT

Summary

This article provides detailed steps how to add Tier 2 partner having no CSP profile on Microsoft in MachPanel.

Applies To

This article applies to v6 and above.

Requirement

For Partners of Tier 2 having no CSP profile on Microsoft, there is anoption of 'No Profile' when creating a CSP package in MachPanel.

Partner of Tier 2 is required to import offers through a CSV and then sell them.
Firstly customer needs to be set up on backend [directly on Partner center or Tier 2 provided interface] and then imported in MachPanel from where you can do detailed management. During the provisioning phase Login/Password of the admin / tenant needs to be entered in MachPanel to complete provisioning.
Once import is completed into MachPanel, ensure to use MachPanel for all actions/operations so that the panel and backend (CSP account) remains in Sync.

Detailed flow is explained below.

Add No Profile CSP Product

In first step for tier 2 partner you have to create no profile CSP product. Navigate to following path Home > Service Plans > Microsoft CSP Products and click Add New Product as shown below:

Select No Profile from O365 Partner Profile

Under Offers tab you have to Import Offers.

Download sample CSV file and then import required offers to service plan.

After Importing offers select the offers and then provide the rest of the details and Finish to add the Service Plan.

Subscribe Customer using No Profile Product

Now you have to provision\subscribe CSP service using this "No Profile" service plan as shown below:

Select CSP Services as shown below:

Select 'No profile' product for Package. Provide all the required details and add your product to shopping cart.

In service queue click control & add admin login details created at CSP

After providing details click RUN to complete provisioning.

To manage CSP account navigate to Path: Home > Service Director > Microsoft CSP > Accounts and click Manage.

How to increase License quantity of CSP service from MachPanel?

In order to increase the licenses you have to increase the total number from following path: Home > Customer Manager > Subscriptions. Click on the name of subscription as shown below:

Select Subscription tab and add Quantity. click Update when done.

In CSP panel you also need to add quantity.

How to increase quantity of Domains and Users?

In order to increase the quantity of Domains allowed and Users you need to sell Add-ons. First of all you have to create an Add-on at following path: Home > Service Plans > Microsoft CSP Products and associate to your CSP Service Plan.

Then you have to subscribe service and select Add-on from services section. After selecting currency you have to select Package Type and Package and finally select the Add-on.

Add to shopping cart and let it provision from Service queue. After completion it will be shown under your subscription's Add-ons tab.

5.4.10 HF5 - Hotfix 5 for MachPanel build v5.4.10 - Updated 13th July 2016

zohaib.shaikh — Fri, 25 Mar 2016 05:34:13 GMT

Summary

This article provides 5.4.10 HF5 (Hotfix-5) and information about how to apply this fix on your servers. The hotfix is a cumulative update so contains all fixes from HF1, HF2, HF3 and HF4 for build 5.4.10.

Applies To

This article applies to MachPanel v5.4.10.

Important Notes

Prior to performing any update take backup of your MachPanel Database, Control and Remote servers. See below KB article for more details on how to take backup. http://kb.machsol.com/Knowledgebase/Article/50248

MachPanel Control Panel and all MachPanel Remote Servers need to be on Build v5.4.10 and then Hot-fix can be applied. Please follow the steps given below in sequence and execute instructions in the KB articles to complete the update:

Latest Issues Fixed

v 5.4.10 HF5
------------
Last Updated on 12th, July, 2016.

1. Fixed Mailbox usage not getting updated.
2. Fixed Edit SFB User error using API.
3. Enhanced ADUser, group or contact CN creation to allow object creation when CN is already in use for another object by appending integer value at end of CN.
4. Fixed issue where Password was not encrypted for AdirUser when ADSync enabled for user.
5. Setting of correct CountryId while adding/editing lync user through API in ADUser table done.
6. Fixed adding Conference Dial-in numbers issue when numbers are not already added (table is empty i.e. no records found).
7. Fixed issue with automatic execution of FixSecurityPermission operation from service queue.

This Update Contains following 4 Hotfix items also:

v5.4.10 HF1
-----------
Last Updated on 1st, Apr, 2016.

Switch Package issue for Skype4B Users when the new package has more than one dial plan fixed.
ADSync problem of client UPN setting as hosted UPN when client domain is added as accepted domain in hosted MachPanel fixed. Now it will set to primary/default domain of the hosted organization when UPN is not selected for sync in ADSync template.
Graph issue for Resource/Shared mailboxes fixed.
Duplicate Region/Area names in Region/Area drop-down lists fixed.
Office 365 menu shown on client side panel when office 365 module is turned off fixed.
Company/Owner/Reseller selection option is shown on client side interface for office 365 usage report fixed.
Issue in BulkUser creation in Skype4B module fixed.
Linked mailbox creation issue fixed.

v5.4.10 HF2
-----------
Last Updated on 22th, Apr, 2016.

Fixed Call Rates processing issue when no group job is present for Skype4B
Fixed issue adding group job, when an Apostrophe is found in job data/text
Updated Organization Name, Company Name field in Customer profile to allow 128 chars.
Fixed Access Template issue in Exchange where Add Linked/Shared/Room/Equipment mailbox button were visible when not allowed.
Mailbox, Mail Contact and Distribution List display in select boxes is standardized in exchange module like DisplayName - EmailAddress (Type)
Fixed Error in Exchange management due to wrong id used for options hover menu.
Auto remove old backup will remove DB backups too if SQL is installed on Control Panel.
Fixed issue where mailbox selection on Client dashboard takes user to Mailbox listing instead of Mailbox edit screen.
Added Linked, Resource mailbox creation from Customer Dashboard, previously it supported only User Mailbox creation.
Fixed bug in Linked mailbox creation giving error Password is blank.
Fixed quota graphs on customer dashboard. Separate graph added for resource mailbox.
Fixed issue when Cancelling Skype4B subscription and getting Data Type Conversion error.
Fixed Case Sensitivity issue in DID areas and Types.
Fixed issue where CS was taking backups twice when schedule was set as "Daily".
Fixed issue when employee was restricted to access AD Domains via roles, whole AD module was hidden from menu.
On Add-on Quantity cancellation, an email will be generated mentioning Add-ons quantity cancelled in subject.
Fixed Lync, SharePoint, Exchange etc. Clear button in Group Action redirects the page to main group action interface.
Fixed Call records processing error where error occurred in saving data due to different amount format.
Fixed: Removing Music on Hold audio file while editing Workflow not working.
Fixed: Object reference error on Edit Skype4B Subscription resources.
Fixed: Multiple occurrences of same phone numbers in phone numbers listing.
Fixed: Invalid Phone number display format in "DisplayNumber".

v5.4.10 HF3
-----------
Last Updated on 22nd, May, 2016.

Enhancement: Call report and Conference call report name will contain from date and to date .
Enhancement: Standardize Report name in all places using format ReportName-MonthName-dd-yyyy-HH-mm-8RandomChars.
Enhancement: The new Akamai transaction URLs that are available for Authorize.Net are updated in panel, so all supported versions have configurable API URL(s).
Fixed: Remove permission from Room mailbox via Group action gives error "Data at the root level is invalid. Line1, position 1.
Fixed: Fixed issue where password complexity message appear when creating a room mailbox from AD.
Fixed: Error in exporting audit logs after loading from archives.
Fixed: Phone number assignment/unassignment issue in add/edit Lync user/workflow
Fixed: Fixed commission display issue in Servie plan/add-ons, it was not populating correct.
Fixed: Removing Music on Hold audio file while editing Workflow
Fixed: Object reference error on Edit Skype4B Subscription resources
Fixed: Multiple occurrences of same phone numbers in phone numbers listing
Fixed: Invalid Phone number display format in "DisplayNumber"
Fixed: User already exists issue in bulk lync user creation if process is failed in first attempt.
Fixed: Addon resource display issue at client side in Exchange.
Fixed: Wrong redirection- workflow Add/edit page click to cancel.
Fixed: Issues handling audio files for Interactive Voice Responses of a workflow.
Fixed: Issues handling audio files for GUI based organization
Fixed: Exchange import gives error Cannot convert NVarChar to Date when litigation hold is enabled on Mailbox.
Fixed: An ADUser is created as enabled user by ADSync, Shared mailbox creation for same user fails as Enable-Mailbox command does not work for Enabled AD User.
Fixed: User Signed In as Contact of Customer appears as Customer when there is no activity for 20+ minutes.
Fixed: Erorr in assigning LineUri to Skype4B users through group operations.
Fixed: Skype4B resource tab issue when no addon is present.

v5.4.10 HF3
-----------
Last Updated on 23rd, May, 2016.

Error in Subscribe Hosting or Subscribe Multiple fixed in API/WHMCS calls.

For Issue: Removing Music on Hold audio file while editing Workflow not working. You have to update SfB/Lync remote servers, replace files from Remote folder.

v 5.4.10 HF4
------------
Last Updated on 3rd, Jun, 2016.

1. New functionality added to Allow selling of Add-ons with Quantity option using WHMCS Product Configuration Options. For details check article on link: (http://kb.machsol.com/Knowledgebase/Article/54522)

Important Note: Clients using WHMCS, need to update their integration. Integration files have been updated here (http://kb.machsol.com/Downloads/Download/53448). Also new integration pack must be deployed in case any error is encountered.

2. Fixed OU not getting deleted on Customer deletion.
3. Fixed AD User was not deleted when Exchange Subscription Cancelled and Auto Delete ADUser was On.
4. Fixed Lync user creation with Apostrophe in name does not set First Name, Last Name correctly.
5. Validation improved in SFB user creation to reduce errors from back-end on invalid input in Name, SIP etc.
6. Fixed error in editing SFB resources when related Call bundle is deleted.

Procedure

Go to MachPanel configuration studio.
Shut down all the MachPanel services and also exit the configuration studio. Make sure no instance to MachPanel Configuration Studio is running under any user.

Download the hotfix v5.4.10HF5.zip file from the link at bottom of this page.
Stop IIS Admin Service, please make sure that all the services are STOPPED from MachPanel Configuration Studio. Verify from "Task Manager" that the following services are not running.

MachSol.MachPanel Provisioning Service.

MachSol.MachPanel.ConfigurationStudio.exe.

MachPanel Billing Service.

MachPanel Helpdesk Service.

MachPanel Network Service.

MachPanel License Service.

MachPanel O365 Service.

Replace files from Control Server folder on MachPanel control server (Path: C:\Program Files\MachSol\MachPanel Control Server) and Replace files from Remote server folder of hotfix folder on MachPanel remote server keeping the folder hierarchy same as it is in hotfix. (you should get message to overwrite files, if not you are not doing it right).
Execute script.txt from zip file on MachPanel_Db after logging in to SQL management studio as MachPanel_Db user. Password can be obtained from connection string in registry of MachPanel Control Server.

Once all files are replaced properly from hotfix folder Restart all services related to MachPanel on Control as well as Remote Servers.

Download Link

http://www.machsol.com/updates/v5.4.10HF5.zip

Note: Please Unblock the files before replacing in installation directory if the downloaded Zip folder is blocked.

ADSync – Important Notes and TroubleShooting Details

rehan_waseem — Tue, 03 Mar 2015 23:35:37 GMT

Summary

This article provides you some Important Notes plus Troubleshooting details regarding MachPanel ADSync Utility.

Applies To

Applies to MachPanel v6 and UP, and requires ADSync latest version 4.1

Pre-Requisite

AD sync is a separate module and costs may apply. Kindly contact sales for further information.

ADSync installer can be downloaded from our website www.machsol.com by logging into your account. Please review more details at following KB: http://kb.machsol.com/Knowledgebase/Article/51378

ADSync is installed as per details here: http://kb.machsol.com/Knowledgebase/Article/50350
ADSync is configured as per details here: http://kb.machsol.com/Knowledgebase/Article/50351

Basic Note:

ADSync needs to be installed on Primary Domain Controller and ALL Additional Domain Controllers on Client-AD.
After installation on all Additional Domain Controllers, configure basic information in ADSync Tool on Primary ADSync Server, then copy SyncConfigurations.xml from installation folder on Primary Domain Controller to each Additional Domain Controller. Registry on both types of servers will tell you correct location for configuration file. For old clients the path will be C:\Windows\System32 folder, and for new clients the path to place this file will be C:\Program Files\ADSync. You can confirm/fix the Registry for correct location of SyncConfigurations.xml.
Ensure there are no copies of SyncConfigurations.xml anywhere on the Primary or Additional Domain Controllers. There should be one and only one file on each server named SyncConfigurations.xml.
Make sure “Password must meet Complexity Requirements” is Enabled in Local domain policy.
To start ADSync to function you need to force all users to change password on On-Premises (Local/Client) AD, please do expire all user passwords and restart all domain controllers.
If ADSync User Licenses (AULs) reaches it limit, ADSync will stop User syncing. See detail at troubleshooting note 10.

Important Note 1.

Error / Problem Statement: Access is denied when saving the ADSync configuration or saving user mapping.

Cause: The utility is trying to access a system resource (local file or active directory object) and has no sufficient privileges for read/write operation.

Resolution:

Please check that the user account provided in ‘Admin Login/Admin Password’ fields of ADSync configuration studio has sufficient permissions set to the ADSync installation directory and also to the selected logs folder. If not then provide read/write permission for provided user account
Also check that the utility is running under a user account which has access (read/write) to the installation directory and to the log files directory.
Please check that the user account provided in ‘Admin Login/Admin Password’ fields of ADSync configuration studio has valid permissions in active directory for all the local organizations (OUs) selected in sync profiles.

Important Note 2.

Error / Problem Statement: Authentication Exception when trying to fetch hosted organizations from machpanel control server or hosted organizations are not listing/fetched

Causes:

Sync web service at machpanel control server end is unable to validate the request due to invalid credentials provided for ‘service username or service password’.
For hosted organizations not listing, the service provider may not have enabled the ADSync option from control server (service director > active directory > organizations)

Resolution:

Please provide valid credentials for the fields ‘service username/service password’. These must be the credentials which are used to login to customer portal of machpanel. You can even option control panel URL on the AD server to ensure control panel URL is accessible and that using the credentials you are able to login as End Customer which is owner of organization in question.
Please verify that the organizations under the selected customer are enabled for ADSync from control server (service director > active directory > organizations). You have to login as provider and enable ADSync for the organization.

Important Note 3.

Error / Problem Statement: Information not syncing to the hosted

Causes:

There are several reasons due to which the ADSync may not be syncing information to the hosted active directory:

ADSync service not running on client AD
Sync configuration is corrupted
Data is uploaded but not syncing due to provisioning-svc on control server not running or having some error

Resolution:

There is no single resolution to this situation. Below are some guidelines to trace out the problem.

Please confirm ADSync svc is running on client AD
Re-configure the sync profiles (see below: Re-configure sync profiles)
Share logs with Machsol support from ADSync client logs folder and machpanel control server (ADSyncExceptions) logs folder

Important Note 4.

Error / Problem Statement: All information is syncing other than the password (password not syncing)

Cause: In this case we do have multiple scenarios which are resulting in failure to sync passwords for local users to hosted.

Resolution: Please see below check list for resolution to this problem.

In active directory on client platform “password must meet complexity requirements” under local security policy is set to true
VC++ 2010 runtime is installed (specific to OS platform i.e. x86/x64) on all PDC/ADC
Check that ‘ADSyncPolicy.dll’, ‘ADSync.PolicyLogger.dll’ and ‘ADSync.ClienHelper.dll’ files are placed inside the ‘$windir\System32’ directory on all PDC/ADC
Check that there exists an entry for ‘ADSyncPolicy’ in following registry path ‘HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Notification Packages’ on all PDC/ADC
Are all the PDC and ADCs rebooted after installing and configuring the ADSync tool ?

If all of the above checklists are correct then the reason of issue may be configuration problem. Please perform following steps.

Re-configure the ADSync/Sync Profiles:

Delete all instances of the 'SyncConfigurations.xml' file from ADSync host on all PDC/ADC. Even look for this file on other location because those instances may create issues too. You have to be sure that only 1 file exists after your configuration is completed. So, if you are looking for a complete fresh configuration, DELETE ALL SyncConfigurations.xml files.
Close ADSync configuration studio, re-open and re-configure sync profiles.
Copy the updated 'SyncConfigurations.xml' file from PDC ADSync installation director to each Additional Domain Controller. Registry on both types of servers will tell you correct location for configuration file. For old clients the path will be C:\Windows\System32 folder, and for new clients the path to place this file will be C:\Program Files\ADSync. You can confirm/fix the Registry for correct location of SyncConfigurations.xml.
Open the user mapping screen and unselect mapping for all the users by clicking twice on ‘select all’ box on top right of the users listing and then press save.
Exit the user mapping screen
Open the user mapping screen again and provide/verify appropriate user mapping and then press save.

Important Note 5.

How does the utility update the information & how it should be operated?

Lets say you update some user information or password on Client-AD, the information will be replicated to Hosted-AD via control panel in around 15 minutes. Below is a step by step process how this utility shall be operated.

Save Basic configurations in utility on Primary DC.
Copy SyncConfigurations.xml file from PDC installation folder to all ADC(s) to appropriate folder. Registry on both types of servers will tell you correct location for configuration file. For old clients the path will be C:\Windows\System32 folder, and for new clients the path to place this file will be C:\Program Files\ADSync. You can confirm/fix the Registry for correct location of SyncConfigurations.xml.
Provide On-Premises to Hosted user mapping using the ADSync config studio.
After providing the mapping, modify the On-Premises Active Directory user account information (Including password).
To force the sync process to start immediately, Press Sync Now from ADSync Configuration tool, or simply restart the ADSyncSvc using Services.MSC (Windows Services Manager) on PDC.
This shall update the information to the control server.
From there, control server uses its Provisioning Service to update the data on associated backend Hosted active directory server. You can also force the control server to process records instantly by restarting provisioning service on control panel server.
Normally it should take a maximum of 15 minutes to updated the information from On-Premises to Hosted server. To force immediate update, restart ADSyncSvc on Client AD and "MachPanel Provisioning Service" on control server.

This should update the On-Premises active directory user information to the Hosted active directory user.

In case of any issues, you should Enable Logging from configuration studio of ADSync Tool and review that for any problems. Similar logs need to be review on MachPanel Control Server to see if there is any issue in processing of ADSync related data. You can also send the log files generated from inside the selected folder to us for review.

Important Note 6.

General Troubleshooting Notes:

1. Is logging enabled in ADSync Client Configuration Screen?
2. Does there exist “ADSyncPolicy, ADSync.ClientHelper, ADSync.PolicyLogger” dll files in “$windir\System32” folder?
3. Has the client enabled “Password Must meet complexity requirements” in user account policy?
4. Does there exist an entry for “ADSyncPolicy” in[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages]
5. Is ADSync utility installed on Primary Domain Controller and all Additional Domain Controllers?
6.    Is Client using “DSA.msc” to change the password?
7.    Does ADSync working fine for all the attributes other than password?
8. Does the user provided in ADSync Config Studio for “Local Admin” field has read/write permissions in local AD?
9.    Does the Operating user of ADSync Utility has read/write permissions on installation directory and the directory specified for logging?
10. Is LDAP URL correct.
11. Does the On premises admin user have sufficient administrative rights?
12. Does the On Premises Admin user have rights on the installation directory of MachPanel and on the .XML file?

Important Note 7.

Security and Password Policy: Please note that password policy shall remain consistent between source(client) AD and Hosted (Cloud) AD, meaning that both ADs should have similar password policies. Best to have Complex Password Policy. Also there is no need to select the ‘reversible password’ option in source(client) AD for syncing password.

Password for a user account is secured by modern encryption schemes and is stored in a secured place.

To make communication even more secure, one must apply/enable SSL certificate for MachPanel Control Panel website and use the ADSync Web Service address as https:// (like https://cp.providerdomain.com/webservices/Adsyncsvc.asmx)

Important Note 8.

You will face following issue if Log path in ADSync Registry is incorrect: i.e. it should be same as C:\Program Files\ADSync\Logs as shown in the snapshots below:

Important Note 9.

Scenario:

If ADSync User Licenses (AULs) limit reaches at “/PCC/System/Licenses.aspx” , User syncing will stop (at local AD: as data of user 5611 being sent normally but not being synced)

Resolution:

In this case you have to look into logs at control server at C:\Program Files\MachSol\MachPanel Control Server\Logs (File: ADSyncExceptions)

ADSync Error: ADSync license error: ADSync user license limit reached.

Contact MachSol Support\Machsol Sales to update licenses. After updating licenses, User syncing will start working again as per ADSync Configuration.

Important Note 10.

Problem:

Password sync working from PDC but not working from ADC.

Verification to Resolve issue.

Verify configuration file path in registry and file location in windows.
Confirm Notification packages entry in registry
Confirm Microsoft Visual C++ 10 Runtime installed
Confirm ADC is rebooted
Confirm ADSync files exists in system32 folder.

Important Note 11.

Problem:

Utility prompts to restart the machine: ADSync config studio, on application load verifies the required VC++ 10 module installation and custom module registration in windows filters, If either the VC++ 10 installation missing or custom module registration is missing, the utility prompts to restart the machine.

Verification to Resolve issue.

Check in windows program & features that VC++ 10 is installed and no other version is installed (if there exist multiple versions and are required, then the VC++ 10 installation shall be later one)
Run 'msinfo32' command in windows command then navigate to 'software components' then to 'loaded modules'. See if 'ADSyncPolicy' module is listed in the loaded modules

Solution:

If 'ADSyncPolicy' module is not present in loaded modules, then perform following steps

Verify and make sure that ‘ADSyncPolicy.dll’, ‘ADSync.PolicyLogger.dll’ and ‘ADSync.ClienHelper.dll’ files are placed inside the ‘$windir\System32’
Verify and make sure that there exists an entry for ‘ADSyncPolicy’ in following registry path ‘HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Notification Packages’
If both of the above are verified, then reboot the system and perform the step 2 described in verification process to verify the module is loaded

Important Note 12.

Scenario:

Using default OU 'Users' under sync profile.

Details:

‘Users’ container ‘ObjectCategory’ is ‘Container’ and is system/DC created container whereas admin created container/Ous have ‘ObjectCategory’ is ‘Organizational-Unit’. This is why its available in selection list.

However there’s a way around as below.

Workaround:

Open/Edit ‘SyncConfigurations.xml’ file of ADSync
Delete all sync profiles (Inside SyncProfiles). Save and re-open ADSync Config Studio
Add a profile with some random Local OU selection without “Auto Mapping On”, and do not do manual mapping too and Save
Close Adsync Configuration Studio
Find and replace highlighted part with ‘distinguishedName’ attribute value of ‘User’ container and Save

Service Management of Exchange in MachPanel

mudesira.munir — Tue, 15 Apr 2014 00:42:43 GMT

Summary

This article provides a summary on service management of Exchange Accounts in MachPanel.

Applies To

This article applies to MachPanel all versions.

Pre-Requisites:

Before you can manage services of Exchange you need to Integrate Exchange With MachPanel Control Panel. Please review the below KB article:

http://kb.machsol.com/Knowledgebase/Article/50264

Service Management of Exchange Hosting:

You can manage hosting services for Exchange by clicking on the Service Management link from the following path: Home >> Service Director >> Exchange Hosting >> Exchange Accounts. See the snapshot below:

Fix Security Permissions for all Organizations: It will Fix security Permissions for all Organization in the listing. Check more details on this link: http://kb.machsol.com/Knowledgebase/Article/54526
Sync data from backend for all Organizations: Please review following KB for more details: http://kb.machsol.com/Knowledgebase/Article/50370
Enable Litigation Hold: This option will enable litigation hold in bulk for organizations selected.

General:

The General Settings tab shows the general details of the subscription. See the snapshot below:

Click on Enable Migration button to import Public Folders in exchange account. Please review following KB article for more details:

http://kb.machsol.com/Knowledgebase/Article/50291

Export Mailbox Permissions
Click on Sync data from backend in order to synchronize to the changes made at the backend. Please review following KB article for more details:

http://kb.machsol.com/Knowledgebase/Article/50370

Export Mailbox Forwarding
Update Recipient Settings

Further, in Exchange Service Management you can manage following:

Adding and Managing Distribution Lists

mudesira.munir — Mon, 14 Apr 2014 00:31:48 GMT

Summary

This article provides a summary on adding and management of distribution lists in MachPanel.

Applies To

This article applies to MachPanel all versions.

Settings for Distribution List

You can set setting for "Require that all senders are authenticated" by navigating Service Director > Exchange Hosting > Accounts > Settings. A provider can check this setting for all organization and also enforce to any organization.

Click on Add/update Organization Setting to enforce setting to single or multiple organization and select desire settings.

Creation of Distribution List

To add a distribution list navigate to the following path: Home » Service Director » Exchange Hosting » Exchange Accounts. Click on the Service Management link and then select Distribution List tab.

Click on Add Distribution List to add a new DL.

Type: Select type of the distribution list. It supports Simple Distribution Group, Room Distribution group, Security Group & Dynamic Distribution Group.
Display Name: Enter the distribution list name in Display Name Box.
Primary Email: Enter primary email address.
Select option Require that all senders are authenticated (This setting is enforced by provider i.e. organization administrator is allow to change).
Select the list manager from Managed By drop-down list and click Add button. You can add Mailboxes, Contacts and Distribution Groups as List members.

Click on Add Bulk Distribution List button when done. In order to Bulk Delete Distribution lists, you have to select DL's .

Primary Email: Enter primary email address.
CSV file to import: Browse to select a csv file.

Click on Add Bulk Distribution List button when done.

Adding Member to Distribution List:

Distribution list members receives the email sent to the distribution list. They can also post email message to the list.

To add a distribution list member, select the distribution list for which you wish to add a new member. Click on the List Members tab and select the list member from Mailbox drop-down list. Click the Add button.

Adding New Mail Address:

A distribution list can have multiple email addresses or aliases. This allows the distribution list to receive messages that are addressed to any one of these e-mail addresses.

To add a new email address to a distribution list, click on the distribution list name for which you wish to add email address. Select Email Address tab, enter the name of new mail address in Email Address box and click on Add button.

Two types of Email addresses are supported

SMTP
Custom

Setting Mail Restrictions:

You may define Accept Message From and Restrict Message From settings for the distribution list.

To set restriction to a distribution list, click on the distribution list name for which you wish to set restrictions and select Advanced tab.

The advanced interface displays following:

Accept Message From: There are two options to select from:

All senders: If selected, message will be accepted from any sender.
Only senders in the following list: If you selected, the message will be accepted only from the addresses selected from the list.

Reject Message From: There are two options to select from:

No senders: If selected, message will never be rejected.
Senders in the following list: If you selected, the message will be rejected if coming from the addresses selected from the list.

Grant Send As and Send On behalf:

To grant Send As and Send On Behalf to a distribution list member, click on Send As tab and select the list member from Mailbox drop-down list. Click the Grant Send As button. Similarly, lick on Send On Behalf tab and select the list member from Mailbox drop-down list. Click the Save button.

Message Approval:

To grant message approval to the mailboxes, a new tab for message approval has been added. If Enable/Disable checkbox on top is unchecked, all below settings are hidden.

Group Actions for Bulk Distribution List

Now you can perform various Group operation for bulk distribution lists.

Click on Plus sign to expand and select required group operation on distribution Lists.

General Settings
1. Hide from Exchange Address Lists: Checkbox
2. Send out-of-office message to originator: Checkbox
3. Delivery reports
  1. Send delivery reports to group manager
  2. Send delivery reports to message originator
  3. Do not send delivery reports
4. Limits
  1. *Maximum receiving message size (MB):
5. Membership Approval
  1. Member Join Restriction:
  2. Member Leave Restriction:
Restrictions
1. Require that all senders are authenticated:
2. Accept message from:
  1. All senders
  2. Only senders in the following list
3. Reject message from:
  1. No Senders
  2. Senders in the following list.
Managed By
1. Managed by (Dynamics and other DL.)
Add List Members
Remove List Members
Grant Permissions
1. Send As
2. Send On Behalf
Remove Permissions
Message Approval
1. Group Moderators:
2. Senders who don't require message approval
3. Select moderation notifications

MachSol Software Downloads (MachPanel Control Server, Remote Server, ADSync and MachSync)

zohaib.shaikh — Wed, 20 Nov 2013 22:10:31 GMT

Summary

This article provides details on how to download different MachSol Software installers like MachPanel Control and Remote Servers, ADSync Installer and MachSync Installer etc..

Applies To

This article applies to MachPanel Control, Remote, ADSync and MachSync.

Download Installers for MachPanel Control and Remote Agents, ADSync and MachSync:

Visit https://www.machsol.com and click on "Sign In" from top right of home page.
Sign-Up to create an account or Sign-In with your existing account to purchase or test/trial MachPanel Products.

*Do note that you will need to setup and use 2FA method for login. Otherwise you will not able to login into the Customer Portal.

You need to provide registered "Email ID" with MachSol Inc. which is also known as Primary Contact. (Emailid@Yourdomain.com). Enter your details and click on Login. You can also reset password by clicking on Forgot Password.

To Download MachPanel installers, please navigate to Billing $ Subscriptions >> Downloads and click on link to download installer you need.

To Download MachSync installer, please navigate to Billing $ Subscriptions >> MachSync. You will be able to Download MachSync Installer or Manage your existing MachSync Licenses.

Important Note: Please contact MachSol Sales team to purchase your desired modules as the links to download are only visible to Primary Contact (which is a registered contact at MachSol) if license is purchased or trial is activated (in case of MachSync). After purchase the sales team will enable download.

More Information

After download, please use the information on KB links given below for installation and configuration.

Installation of MachPanel Software

Installation of ADSync

ADSync Installation Guide

Installation of MachSync

MachSync Installation Guide

ADSync – Configuration Guide

mudesira.munir — Tue, 12 Mar 2013 02:59:12 GMT

MachPanel ADSync

MachPanel ADSync module is the directory synchronization tool that consolidates one Active Directory with another. It performs one-way synchronization and keeps your cloud user accounts updated.

Summary

This article provides you information regarding the configuration of ADSync.

Applies To

Applies to ADSync v4.2 - v6.
ADSync latest version is 6.0.
Latest MachPanel Build v7.2.35 supports latest ADSync v6

Pre-Requisite

You need following information:

You have to Enable ADSync from MachPanel before configuring your ADSync at the local Active Directory.

Navigate to the following path: Home » Service Director » Active Directory » Active Directory Organizations
Click on Enable ADsync link as shown in the snapshot below:

Service Username and Service Password i.e. Login Name and Password to Access the Control Panel customer account who is owner of Hosted Organization which needs to be synced with Client-AD. This can either be a Customer Account or a Contact of Customer in control panel.

MachPanel Service URL should be accessible from Client-AD.

Reboot Required

Yes, it is required to Reboot ALL Client Domain Controllers (Primary and Additional) at least once where ADSync tool is installed.

Description

ADSync is a utility consisting of multiple components used to synchronize local active directory objects with Hosted/Cloud Active Directory objects. ADSync utility v6.0 will sync Multiple OU's in a client/local AD with Hosted OU.

Types of object(s) which are currently synchronized.

User Accounts
Groups

The data fields which are being synchronized through this utility for User Accounts are:

Description
Display Name
First Name
Last Name
Email
Initials
Middle Name
UserPrincipalName(UPN)
Direct Manager
Home Phone
Mobile Phone
Business Phone
Pager
Home Page
Fax
Address
City
Country
State
Zip Code
Company
Job Title
Department
Office Location
Password
Notes
Proxy Addresses [
- SIP Address
- EUM Address
- SMTP Address ]
AD User Enabled
Thumbnail Image
Logon Hours
Use email to generate UPN {'Use Email to Generate UPN' is not attribute rather a configuration setting to to set user's UPN on hosted side using 'Email' attribute at the time of creation.}

The data fields which are being synchronized through this utility for Groups are:

Name
Display Name
Type
Members

MachSol ADSync utility is a one way synchronization tool, that enables the synchronization of AD users from local/on-premises to the hosted/cloud AD and vice versa is not currently possible. Editing through MachPanel is disabled for a mailbox enabled for ADSync.

The reason to disable the AD user editing in MachPanel for those organizations which are selected to be synchronized with on-premises ADs is that the information updated on MachPanel shall not be available on client’s on-premises AD. And also as ADSyncSvc periodically updates data from local to hosted AD, the changes done through MachPanel will be voided with the synchronization process.

Configuring AD Sync

When installation finishes on Primary Domain Controller, ADSync Configuration Studio appears, fill form according to instructions below and save settings.
From the Home page you can click settings

Terminology used:
Terms used to reference ADs are as under: Please note the difference between Two AD’s:

Local-AD / Client-AD / On-Premises: This is the AD where you have installed MachPanel ADSync Utility. Once ADSync is enabled you can access this local AD and modify user properties on this AD. These changes will automatically replicate/sync with the Provider’s AD (hosted AD).
Provider AD / Hosted AD / Cloud AD: This is the AD that is managed directly by MachPanel Control Server via MachPanel Remote Servers.

Settings:

Settings will show General & Advanced Setting of ADSync:

General Settings:

Fields of the above screen are described below:

Control Panel Url: This is the URL to Control Panel Web Service (provided by host). This can be a Web or IP based address. Check "Tooltip" next to input field for example.
Domain NetBios name: Local-AD domain NetBios name input field.
Service Account: Local-AD administrator account with permissions to perform local operations.
Password: Password for local-ad admin user provided in above field.

Advanced Settings:

Sync Data Attribute: Sync Data Attribute’ is used to capture the updating password info and store its hash in this attribute. Previously this was fixed to ‘division’ attribute of Active Directory User, but now can be customized to any valid writable Active Directory User attribute. Note that this attribute is used to temporarily store (encrypted hash) password before syncing it to hosted user and as soon as user password/info is synced in next sync cycle it is cleared from the active directory attribute.
Sync Data every: You can specify Sync interval or use Sync Now option.
Logging Enabled: Enable/Disable logging. Simple check/uncheck input to whether to enable logging or not.
Logs Folder: This is Log Path. Select log folder to create log files in there if logging is required. The log folder path of ADSync logs should not be of PDC desktop, and the provided log path should also be present on all ADC.
Purge Logs after: Select number of days after which logs are cleared from the ADSync folder.

Then under Profiles you can click 'Add Profile' to add a new profile.

Profiles:

Add Profile will display following fields:

Local Organization

Organization: Input field to set Local-AD/On-Premises organization LDAP, or use Icon on the right to list all local organizations and select one of the organizations. This field is editable so you can even specify the ROOT so that ALL USERS under this AD get listed all at once. You can specify the ROOT if users are under different OUs and you want to list all of them in a single go. In case of large ADs it is recommended to use specific OUs only to keep this quick as it will take long time to load all users in case of large ADs.
User custom filter: Define a filter for Users.
Sync Security Groups: In order to Sync security Groups from MachPanel for ADSync Enabled organization check option Sync Security Groups.
Group custom filter: Define a custom filter for security groups.
Auto Create New User: Allows you to enable / disable auto creation of Local-AD user on the Hosted AD. This option enables the customer that any new user created in local OU for this profile will be automatically created on hosted.
Enable Auto Mapping: Enable/Disable Auto Mapping of all Existing users. This option enables the customer that all the existing users will be auto mapped to selected hosted organization on the basis of UPN and DisplayName respectively.

Hosted Organization

User Name: Login Name to access the customer account in MachPanel in format: user@domain.com. This is owner of Hosted Organization which needs to be synced with Client-AD. This can either be a Customer Account or a Contact of Customer. (In ADSync we need Customer credentials not Reseller/Provider credentials to fetch list of OU’s. List of all OU’s related to Customer are fetched.)
Password: Password for user login provided in service user name.
Target OU: Once above service credentials are provided then hosted organizations enabled for ADSync are listed in the selection input box, select one of the organizations to synchronize its contents. Only the organization(s) owned by single customer (whose credentials are provided) are shown.

Add: Adds a profile to the below profiles listing and is saved in configuration file on pressing the Save button on the configuration screen.

Click Save to save all settings.

Add Custom Filters

In "Custom Filter" for user and groups we need to specify sync group and sync user in the group and users description (Any attribute can be used). Below are examples to use Custom Filter for Users and Group which uses "sync user" and "sync group" description. In below snapshot UserA, UserB, UserC, GroupA and GroupB, GroupC are created in Active Directory.

Example 1:
In this example we have specified "sync user" and "sync group" description in custom filter and as a result UserA, UserB and GroupA and GroupB (which have description set accordingly) will get synced. See below snapshots:

Filter settings
Users custom filter: (description=sync user)
Groups custom filter: (description=sync group)

Example 2:
When we specify below custom filter settings in sync group and sync user description that we need not to sync (any number of attributes can be used) for e.g.

Specify something in company for users that I don’t want to sync
Specify something in display name for groups that I don’t want to sync

only UserA and GroupA will get synced as shown below:

Filter settings
Users custom filter: (&(description=sync user)(!(company=*)))
Groups custom filter: (&(description=sync group)(!(displayName=*)))

Example 3:

To Show and Sync Active Users only, the Attribute that will be used is userAccountControl. This attribute has following properties.

512 -> Enabled
514 -> Disabled
66048 -> Enabled, password never expires
66050 -> Disabled, password never expires

You can use this attibute in a way if you want to extract only active users, example given below will extract only active users.

Filter settings

User custom filter: (|(userAccountControl=512)(userAccountControl=66048))

Filter expressions guides:

https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx

https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax

Configure Mappings

Under the Profiles click Mapping

Select Users to Sync
Enable ADSync for the Hosted Organization in MachPanel. Choose Users from interface below to enable ADSync for users in the parent container i.e: OU selected in profile.

Click Mapping to choose mapping between Hosted and Local User, click check-box to enable sync for selected users.
For users which exist in Local domain but have no counterparts on the hosted AD, you can "Enable Sync" and then auto create them in Hosted platform by choosing "--Create New--".

Important Note:

ADSync needs to be installed on Primary and all Additional Domain Controllers.
After installation on all Additional Domain Controllers, configure basic information in ADSync Tool on Primary ADSync Server, then copy SyncConfigurations.xml from installation folder on Primary Domain Controller to each Additional Domain Controller. Registry on both types of servers will tell you correct location for configuration file. For old clients the path will be C:\Windows\System32 folder, and for new clients the path to place this file will be C:\Program Files\ADSync. You can confirm/fix the Registry for correct location of SyncConfigurations.xml.
Make sure “Password must meet Complexity Requirements” is Enabled in Local domain policy. Describe any symptoms for a particular problem.
To start ADSync to function you need to force all users to change password on On-Premises (Local/Client) AD, please do expire all user passwords and restart all domain controllers.

Summary On: How does the utility update the information & how it should be operated?

Below is a step by step process how shall this utility be operated.

Save Basic configurations in utility on Primary DC.
Copy SyncConfigurations.xml file from PDC installation folder to all ADC(s) to appropriate folder. Registry on both types of servers will tell you correct location for configuration file. For old clients the path will be C:\Windows\System32 folder, and for new clients the path to place this file will be C:\Program Files\ADSync. You can confirm/fix the Registry for correct location of SyncConfigurations.xml.
Provide On-Premises to Hosted user mapping using the ADSync config studio.
After providing the mapping, modify the On-Premises Active Directory user account information (Including password). ADSIEdit is not supported, other than that, all other mechanisms (OWA, or Exchange, Locked screen of desktop etc.) are supported. Change in password via any medium (except ADSIEdit.msc) is captured. Only thing to note is that all the Domain Controllers should have the ADSync module installed on them (one primary and others as secondary) so that the password change actioned by any of the domain controllers gets captured.
To force the sync process to start immediately, Press Click to Sync Now from ADSync Configuration tool, or simply restart the ADSyncSvc using Services.MSC (Windows Services Manager) on PDC.
This shall update the information to the control server.
From there, control server uses its Provisioning Service to update the data on associated backend Hosted active directory server. You can also force the control server to process records instantly by restarting provisioning service on control panel server.
You can set Time in "Sync Interval" to start sync or Click to Sync now to force an immediate sync.

This should update the On-Premises active directory user information to the Hosted active directory user.

User Mappings Example

Let’s assume Hosted AD having the following user.

User.one@livead.com
User.two@livead.com
User.xzy@livead.com Display Name:Gorge John

And local AD having the following Users.

User.abc@localad.com Display Name: Gorge John
User.One@localad.com
User.new@Localad.com
User.lmn@Localad.com

#3 from LiveAD will be matched with #1 on LocalAD based on Display Name.
#1 from Live AD will be matched with #2 of LocalAD based on UPN.

Recommended Scenario:

It is recommended that for SSO (Same Sign On) the UPN should be fully matched in both LocalAD and LiveAD.

References

ADSync – Installation Guide: http://kb.machsol.com/Knowledgebase/Article/50350

Download
ADSync is a separate module and costs may apply. Kindly contact sales for further information.

Troubleshooting Notes:

Detailed troubleshooting notes are available here:
http://kb.machsol.com/Knowledgebase/Article/53477

Ensure logging is enabled in ADSync Client Configuration Screen. In case of any issues, you should Enable Logging from configuration studio of ADSync Tool and review that for any problems. Similar logs need to be review on MachPanel Control Server to see if there is any issue in processing of ADSync related data. You can also send the log files generated from inside the selected folder to us for review.
Check to confirm if “ADSyncPolicy, ADSync.ClientHelper, ADSync.PolicyLogger” dll files exist in “$windir\System32” folder.
Ensure the client enabled “Password Must meet complexity requirements” in user account policy after completing configuration of ADSync and restarted and ADs.
Ensure that there exist an entry for “ADSyncPolicy” in [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages]
Ensure that ADSync utility is installed on Primary Domain Controller and all Additional Domain Controllers.
See if "Password Intercept Log" is being generated/updated for each password update on C:\ drive on any/all of the ADs if client is using “ADSiEdit.msc” to change the password.
See if "Password Intercept Log" is being generated/updated for each password update on C:\ drive on any/all of the ADs if client using “DSA.msc” to change the password.
See if ADSync is working fine for all the attributes other than password.
Ensure that user provided in ADSync Config Studio for “Local Admin” field has sufficient permissions in local AD (Should be Member of: Administrators, Domain Admins, Domain Users, Enterprise Admins, Organization Management. Check reference below).
Ensure the Operating user of ADSync Utility (User logged in with while configuring ADSync) has read/write permissions on installation directory and the directory specified for logging.
Ensure LDAP URL is correct.
The service account in ADSync (“Admin Login” / “Admin Password”) is used to read the values of attributes that need to be synced from local AD. The service account only writes to Sync Data attribute ( any other Attribute you specify) of Synced User/Group for tracking purpose on local AD. However, to read the AD attributes, the service account needs to be made member of Domain Admins group in the Local AD.

The "Admin User" specified in ADsync should be member of following. See snapshot below (Schema Admin is optional):

Security and Password Policy:

Please note that password policy shall remain consistent between source (client) AD and Hosted (Cloud) AD, meaning that both ADs should have similar password policies. Best to have Complex Password Policy. Also there is no need to select the ‘reversible password’ option in source (client) AD for syncing password.

Password for a user account is secured by modern encryption schemes and is stored in a secured place.

Running a test case:

Create an AD user in local/client/On-Premises AD under one of the configured Sync Profile.

Open ADSync Configuration Studio and provide mapping for this newly created user (you can use ‘Create New’ option) or if you have enabled ‘Auto Create New user’ option for the selected Sync Profile then leave this step.
Restart ADSync-Svc on local/client/On-Premises AD machine
Now get to hosted MachPanel Control server
Open the database and check ‘Hb_tblTempData’ table, whether it has a pending entry in it or not ?
If there are pending records in ‘Hb_TblTempData’ then restart Provisioning-Svc on Control server
Check in MachPanel whether the user is created on hosted or not. You can use following navigation path. Home > Service Director > Active Directory > Users
Also you can check the Audit logs in the MachPanel interface for sync process. (for filtering select ‘ADSync’ in event groups and press search button)

Customization and Localization of MachPanel

rehan_waseem — Wed, 16 Nov 2011 01:33:28 GMT

Summary

This article describes how to customize and localize MachPanel.

Applies To

This article applies to all versions of MachPanel

Company Profile:

Customization of MachPanel includes Personalization, Localization, API Settings, Terms & Conditions, Menu Setting, Skin (color) changes Search Menus & Email Templates etc.

Company profile settings are used in all the documents where company information is displayed. For example, Invoice document, Payment document, customer control center etc.

Navigate to the following path: Home >> System Configuration >> Company Profile

You can display\append Legal information or Disclaimer in all email\invoice templates, add variables if Append disclaimer in emails check box is enabled
You can set a default Mailbox Template for your company as shown in the snapshot below:

Culture:

Locale selection is an important aspect of the Control Panel. MachPanel Control Panel offers you to select Locale and language under Culture tab. Languages that can be set as default are English (United States), Spanish (Uruguay), Dutch, Portuguese, and German etc..

Personalization:

The Personalization tab lets you personalize your control panel. It’s include control panel name, company name, company website URL, logo etc. Purchase More link is configurable and providers/resellers can provide external link in a field available under Personalization tab in company settings interface.

Personalization is now divided into 4 sections:

Control Panel Settings

Customer Settings

Other Settings

URL to purchase more resources direct from the management interfaces where the existing resources reach their limit:

If the configurable field is left blank, MachPanel will redirect to the offline order form and if any associated Addon is available for sale, it will get selected to be sold.
The functionality will be available on both client and provider/reseller side with extra permission for client to be able to purchase via offline order form. If external link is provided, it will be available without any permission from client side also.
Functionality is implemented in Exchange, SharePoint, CRM, Skype4B and Hyper-V

Please review following KB article for Private Labeling (customize company website URL on different ports) of MachPanel:
http://kb.machsol.com/Knowledgebase/Article/50079

Please review following KB article for White labeling of Reseller\Customers in MachPanel:
http://kb.machsol.com/Knowledgebase/Article/50242

API Settings:

You can set the user credentials and enable\disable status for the API.

Terms & Conditions:

Add terms and condition for your Control Panel

Skins:

Add Skins for your Control Panel.

Allow Resellers to change Skin Settings
Allow Customer to set Skin
Allow Employee to set Skin

You can also Add Custom Skin

Schedule Usage Reports:

You can add a new schedule for usage reports by clicking on Add New Schedule button; Please see more details on KB given below:
http://kb.machsol.com/Knowledgebase/Article/50362

Menu settings:

The Menu settings and Skin (color) change of MachPanel;

You can add a new node to your control panel menu and can modify the existing – custom added mode.

Please review following KB article for more details: http://kb.machsol.com/Knowledgebase/Article/50299

To change a Skin, you have to select the desired color from the upper right corner of the Control panel web interface. See the snapshot below:

Search Menus:

Searchable menu in PCC\CCC.

Hide \ UnHide Modules:

As part of MachPanel customization, you can hide unwanted built in modules like Billing Module, HelpDesk Module etc from control panel. To do so, navigate to Home >> System Configuration >> Built in Modules:

Uncheck the items which you want to hide\unhide and click on Update Configuration button. The hidden modules will be not visible in control panel.

Managing Email Templates in Control Panel:

The flow of handy and well managed information among different involved entities in a business is the primary goal to be achieved. As this plays a very significant role in each business operation, one of such managed piece of information could be in the form of an email or a draft, which can be your business identity for a product or any other important document. Thus, Control Panel provides you different email templates which you can modify according to your needs and trends with ease and flexibility to interact with your customers for billing issues or any other concerns.

Please review following Kb article on Customizing and Handling email templates: http://kb.machsol.com/Knowledgebase/Article/50121

Enable MailChimp

You can also enable MailChimp in MachPanel in latest build

How To Customize Invoice

mudesira.munir — Thu, 05 Aug 2010 07:35:06 GMT

Summary

This article provides information about how to customize invoice that is generated from MachPanel.

Applies To

MachPanel all versions

Procedure

It is very easy to customize look & feel of invoice that is generated from MachPanel. Follow the below steps to customize the invoice.

1) Navigate to Home > System configuration > Billing Configuration > General Billing

2) Click on Invoice Template Tab to edit invoice template.

3) Provide the required changes and click on Save to complete the customization.

Note: Please use only .jpg format for images.