Configuring AD Sync in a Multi-Domain Controller Environment


  • 64-bit
  • Windows Server 2008 R2 and newer
  • Windows Server Core is not supported at this time
  • Domain Admin access on Domain Controller

  • Supports TLS 1.2 or higher. More information on which versions of windows server support which TLS protocols can be found in this article.
  • C++ 2015 Redistubutable and .NET 4.5 installed on target device.
  • Outbound FTP Endpoint: port 21 should be enabled (Optional)
  • Ports 7771 and 7777 open for internal network communuications
  • Port 443 (TLS) for communications with the Passportal dashboard

For clarification on the Windows Agent toggles, see Active Directory Integration.

If you intend to enable Windows Sync for your Company Vault:

  1. Go into the Company Vault > Credentials on the left hand navigation bar
  2. Click on Edit at the top of the screen
  3. Choose Edit Client
  4. Enable Windows Sync, and select any other required options
  5. Click Save
  6. Install the Windows Agent in your network and select your company from the Client drop-down when configuring the agent during the install process

In a Multi-DC environment, each DC will require a sync agent to be installed. The Passportal agent is installed on your Primary DC, and during that installation you decide whether or not to auto-install the secondary DC sync listeners.