Overview
For user validation, inSync uses the ObjectGUID attribute of an Active Directory user. This article demonstrates how to fetch the ObjectGUID from Active Directory and change the format of the GUID into a hexadecimal format that inSync uses.
Steps to fetch the ObjectGUID from Active Directory
Enable Advanced Features in Active Directory Users and Computers.
Open the Admin Properties dialog of the Active Directory user whose objectGUID you want to find.
Click the Attribute Editor tab. The objectGUID value of the user is listed. Click on the View Option.
In the Value Format option, we can select Hexadecimal and then copy the objectGUID of this user.
5. We will need to remove the spaces present in the HEX value.
📝 Note
If the attribute Editor tab is missing in Active Directory Users and Computers use the search option -
Problem -
If you search for a user account, you don´t see the Attribute Editor tab in the properties of the user account.
First we need to verify if the “Advanced Features“ are active in the “Active Directory Users and Computers” console. If not, then select View and click on Advanced Features.
Using the group option -
We need to identify the AD Group where this user belongs, and then we can navigate to the AD Group and select the required user.
Search for the user
Click on the “Member of” tab
Identify the AD Group where the user belongs
Close the user properties tab
Open the AD Group where the user belongs
Navigate to the required user in the group member tab and double click on the user