Use the btopt.exe tool to manage options | AD Bridge
Using the btopt.exe tool, manage AD Bridge options directly from the command-line of a Windows administrative workstation connected to Active Directory.
Some examples of what you can do:
- Switch from hashed IDs to sequential IDs
- Set the starting UID number for a cell after enabling sequential IDs
The btopt.exe tool is installed on computers running AD Bridge in the following directory:
C:\Program Files\BeyondTrust\PBIS\Enterprise
C:\Program Files\BeyondTrust\PBIS\Enterprise> .\btopt.exe --help
btopt - configures local Windows options
Usage: btopt OPTIONS
OPTIONS:
--status Show current configuration status
--narrowsearch Only search the Default Cell on the local domain
--widesearch Search the Default Cell across all domains and two-way forest trust
--sequential Use sequential IDs instead of hashed IDs
--hashed Use hashed IDs
--foreignaliases Allow the use of aliases for users and groups from other domains.
--noforeignaliases Disallow the use of aliases for users and groups from other domains.
--usegc Use the Global Catalog to speed up searches (default)
--ignoregc Do not use the Global Catalog to speed up searches
--startUID=# Sets the initial UID number for a cell (if --sequential)
--startGID=# Sets the initial GID number for a cell (if --sequential)
--minID=# Sets minimum UID and GID number configurable through the UI
--cell=LDAPPATH Identifies the cell whose initial IDs (if --sequential) Example: LDAP://somedc/ou=anou,dc=somecom,dc=com
--enableloginnames Sets the default login names to all the users enabled in all the cells.
--disableloginnames Disable the enable default login names option to all users enabled in all the cells.
--disablesuggestbutton Disable "Suggest" button, which is used to suggest UID/GID assignment to users and groups in the cells.
--enablesuggestbutton Enable "Suggest" button, which is used to suggest UID/GID assignment to users and groups in the cells.
--maxGroupsForUser=# Sets the maximum number of groups to display for a user on the Properties dialog box.
--maxArchiveEventsPerBatch=# Sets the maximum number of events that can be used in a batch while archiving.
--enablegidvalidation The Active Directory user account will be associated with the GID value migrated from the UNIX/Linux account information.
--disablegidvalidation When turned off, you can set the GID value to any number — the GID value is not associated with a specific group. GID validation is disabled by default. When GID validation is disabled, the --minID option is enforced but there are no other restrictions. Any numerical GID can be selected.
--enableAssumeDefaultCell Enables Assume Default Cell.
--disableAssumeDefaultCell Disables Assume Default Cell.
--help Displays this usage information
If the --startUID or --startGID option is set, the --cell option must also be set.