Microsoft Windows Active Directory (AD) is a directory for object data and user permissions, accessible by networked computers. Cornerstone can use AD to authenticate users and check their permissions before allowing them to access data. 

Cornerstone must be configured with the proper search strings in order to locate user and group information in the Active Directory. For most AD installations, the default values will return the proper user and group information from your AD. However, there are some instances where these values may need to be altered.

Follow this link to access a QuickStart, which covers:

  1. Setting up a new Cornerstone Server and selecting a User Authentication type
  2. Following the Windows AD User Authentication wizard
  3. Best practices for setting User and Group Cache life values