Skip to main content
CallTower Solutions Center

Deployment Guide for AD Sync


This document walks through the installation of the AD Sync Engine and Domain Controller Sync Client. Both components will need to be installed before Active Directory data can sync to CallTower.


You will need to allow inbound traffic on ports 5600 & 5605 from to the server where the AD Sync Engine is installed, and outbound traffic on port 5600 to Please provide your Implementation Manager with the public IP address of the AD Sync Engine server once you have opened the ports.


The system can sync new and existing users into the CallTower environment, but existing users will not get their passwords synced until the first time they change the password in your environment after the client installation is complete.  


Customer Prerequisites:

Before CallTower Engineers can start with our side of a new customer AD Sync installation setup, please validate & provide the following customer information prerequisites to your Implementation Project Manager (IPM):

  • <Long Domain> Local Active Directory DNS Domain Name - In the customer's internal environment 
  • <Short Domain> Local Active Directory Legacy (NETBIOS) domain name - In the customer's internal environment 
  • <FQDN> Internal FQDN Of The Ion Engine Application Server - In the customer's internal environment
  • <Public IP> Public IP of The Ion Engine Application Server - In the customer's internal environment
  • <Encryption GUID Key> Encryption Data Key Gathered During The Customer's Installation - In the customer's internal environment 

Deployment Prerequisites:

Before you deploy the AD Sync Engine system, please install the prerequisites:

SQL Express can be installed on the server that will run AD Sync Engine, or on another server in the network. A full installation of SQL Server can also be used if desired. While not recommended, all components can be installed on a domain controller if desired.

Before installing the AD Sync Engine, please validate your user data. It is expected that your userPrincipalName will match the user’s email address set up in CallTower Connect. Typically, this is the user’s primary email address.

Configure SQL Prerequisites:

Switch SQL to Mixed Mode Authentication:

  1. Make sure during installation, that you set SQL to Mixed Mode.

         If not using Express, do the following:

  1. Log into the SQL server on which you plan to install the EPS database
  2. Run SQL Server Management Studio
  3. Connect to the SQL instance
  4. In the Object Explorer pane, right-click the name of the server, and then click Properties.
  5. Go to the Security page.
  6. Under Server authentication, select SQL Server and Windows Authentication mode, then click OK.
  7. Restart the SQL service to bring the change into effect.

    Create the ExtendAdmin SQL Login:

  1. In SQL Server Management Studio, expand Security (in the Object Explorer pane).
  2. Right-click Logins, and then click New Login.
  3. Enter ExtendAdmin as the Login name, and select SQL Server authentication.  Enter a password, and clear the ‘enforce password expiration’ checkbox.
  4. Go to the Server Roles page, and select sysadmin.  Then click OK.


Install AD Sync Database:

  1. You will find a folder “adsync db” in the install package. Run the application (ExtendASP.DbUpgrade.Client.exe)
  2. You will need to set the SQL server address, and the password for ExtendAdmin.
  3. If the database doesn’t already exist, choose to create the database
  4. Upgrade the database to the latest build (if the target version dropdown is blank, you are at the latest build).


Install Ion System

  1. On your Engine Server run the IonCloudEngine installer.
  2. Make sure all the features are enabled:



  1. Click Next and continue until the installer is finished.


Create Security User and Groups in Active Directory: 

  1. Navigate to the location C:\Program Files (x86)\ExtendASP\EPS\Ion Cloud Engine Config Utility
  2. Right click on the Ion Cloud Engine Utility program and Run as Administrator.
  3. Create passwords for the service accounts.


  1. Click Create AD Objects.
  2. At the end of this process, it will pop up a dialog window with some encrypted data in it. Select all the data in the window and save it to a text file. You will need to send this file to your Implementation Manager at CallTower.

AD Sync Setup:


  1. Click on the AD Sync Setup tab.
  2. AD Sync Environment Guide -  this will be provided to you by your Implementation Manager.
  3. Preferred Domain Controller -  enter the FQDN of a domain controller in the same site as this server.
  4. AD Sync Cookie File Path – enter the path of a local directory that the Engine can use to store temporary data.
  5. Database Settings
    1. Server Name – enter the FQDN of the SQL server. If SQL Express was installed locally, enter the FQDN of this server.
    2. Login Name and Password – enter the credentials of the SQL service accounts created earlier (usually ExtendAdmin)
  6. AD Sync Organization Units – click Add… and select any OUs in your environment that contain users with CallTower service.

Install EPS Ad Sync Password Monitoring:

  1. NOTE:  This MUST be installed on each domain controller in any site where users have CallTower service.
  2. If not already present, download and install .NET Framework 4.5
  3. Run EPSAsyncSyncPasswordMonitor.exe and follow the instructions on the screens.
  4. Update the config file (C:\Program Files\ExtendASP\EPS\AD Sync Password Monitor\ExtendASP.EPS.ADSync.PasswordMonitor.exe.config)
    1. IonCloudEngineHostName – enter the FQDN of the AD Sync Engine server in your network
    2. IonCloudEngineAuthUsername – enter the userPrincipalName of the IonCloudEngineUser account created earlier
    3. IonCloudEngineAuthPassword – enter the password of the IonCloudEngineUser account
  5. To complete installation you will need to restart the domain controller.
  • Was this article helpful?