# Add monitored servers to Active Directory server elements

To use an Active Directory Server in the configuration of the Integrated User ID Service on an NGFW Engine, add the Domain Controller servers and Exchange Servers from which the Integrated User ID Service receives information about users' IP addresses as monitored servers in the Active Directory server element.

##

Note: The Integrated User ID Service is primarily meant for demonstration purposes and proof-of-concept testing of user identification services.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. On the Monitored Servers tab of the Active Directory Server properties, click Add. The Monitored Server properties dialog box opens.
2. Select Domain Controller or Exchange Server as the Server Type, then configure the server settings.
3. Click OK.

## Monitored Server Properties dialog box

Use this dialog box to configure monitored servers for an Active Directory Server that you want to use for user identification with the Integrated User ID Service.

Option | Definition
--- | ---
Server Type | The type of the monitored server. The Active Directory server can receive information about users, groups, and IP addresses from Domain Controller servers and Exchange Servers.
IP Address | The server's IP address. Both IPv4 and IPv6 addresses are supported.
User Name | The name of the user account that is used to receive information about user and IP address mappings from the monitored server. Note: The user account that monitors the Domain Controller server or the Exchange Server must belong to the Distributed COM Users group and to the Event Log Readers group in the Active Directory.
Password | The password for the user account that is used to query information about user and IP address mappings from the monitored server.
Hide | Deselect to see the password as you type.
User ID Expiration | The length of time before information received from the monitored server expires. Select the time unit from the drop-down list. The default is 8 hours.