- Kerio WinRoute Firewall Administrator's Guide

Chapter 13 User Accounts and Groups
184
Note: This type of cooperation with Active Directory applies especially to older
versions of WinRoute and makes these versions still compatible. In case of the first
installation of WinRoute, it is recommended to apply transparent cooperation with
Active Directory.
Transparent cooperation with Active Directory (Active Directory mapping)
WinRoute can use accounts and groups stored in Active Directory directly — no
import to the local database is performed. Specific WinRoute parameters are added
by the template of the corresponding account. These parameters can also be edited
individually.
This type is the least demanding from the administrator’s point of view (all user
accounts and groups are managed in Active Directory) and it is the only one that
allows using accounts from multiple Active Directory domains.
Note: In cases when users are authenticated at the domain (all described types excluding
the first one), it is recommended to create at least one local account in WinRoute that has
both read and write rights, or keep the original Admin account. This account provides
connection to the WinRoute administration in case of the network or domain server
failure.
13.1 Viewing and definitions of user accounts
To define local user accounts, import accounts to the local database or/and configure
accounts mapped from the domain, go to the User Accounts tab in the Users and Groups
→ Users section.
Figure 13.1 WinRoute user accounts