About Active Directory easy configuration settings
Easy Config settings are under Optimization > Active Directory: Auto Config. Configure on server-side appliances.
Active Directory autoconfiguration settings
Kerberos Authentication enables Kerberos authentication. If you do not integrate WinSec Controller, you’ll need to configure Kerberos replication users.
NTLM Authentication Deprecated. We recommend you do not enable this feature.
Username specifies the username for the credentials used to join the domain. These must have domain join privileges. For Kerberos support, use any ordinary user account that has permission to join a workstation to the domain. For NTLM support, use any user account that has permission to join a domain controller to the domain. Domain administrator credentials are not strictly required but recommended. The appliance doesn’t cache credentials after it joins.
Password specifies the password for the domain administrator account. Case sensitive.
Domain/Realm specifies the fully qualified domain name (FQDN) of the domain controller. Typically, this is your company domain name. Windows 2000 or later domains are supported.
Domain Controller specifies the hosts that provide user login service in the domain, separated by commas. Typically with Active Directory Service domains, the system automatically retrieves the domain controller name when given a domain name.
Short Domain Name specifies the short (NETBIOS) domain name. You can identify the short domain name by pressing Ctrl+Alt+Delete on any member server listed in the domain controller. You must explicitly specify the short domain name if it doesn’t match the leftmost portion of the FQDN.
Enable Encrypted MAPI enables encrypted MAPI optimization. You’ll also need to enable it on client-side appliances, selecting Enable MAPI Exchange Optimization and Enable Encrypted Optimization.
Enable SMB Signing enables optimization on SMB1-signed connections.
Enable SMB2/3 Signing enables optimization on SMB2/3-signed connections.