<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi all,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’ve configured ExternalAuth to authenticate against our AD and this works well, i.e. any user in our AD can login to RT3 as an unprivileged user and create tickets to specific queues. I also see in the MySQL backend that a user record is created when an AD user logs in for the first time.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My problem is that these users don’t show up in the Configuration<span style='font-family:Wingdings'>à</span>Users list (even when I check the include disabled users checkbox as someone suggested in some post I read). Consequently I cannot assign these users to any groups nor<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In addition: is it good practice to have the normal users be unprivileged (they only need to be able to open and track their own tickets) or should I make sure every user becomes privileged when he logs in for the first time?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:black'>Thanks in advance!<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Jonathan Salomon<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>