Create Mobile VPN User for PDS Practice in Active Directory

draft · accounts-and-access activationvpn-remoteactive-directory

Generated by docuprocessor (prompt article/v3) · 2026-04-22 14:08

Source thread

thread_id: spaces/AAAA05BdS6s/threads/ojKA_gh4S2s · 7 msgs · first 2024-12-17 · participants: Tech ATech BTech C

Tech A 2024-12-17 18:48

@all Hey Guys, I am trying to set up a new Mobile VPN for Dr Ravneet Dhillon, from North Country Pediatric Dentistry - PDS, which I don't see a user with her name in the AD after checking within the HQ-SVR1 (DC) according to the document, we should create a new user within the AD but it doesn't specify which OU should we use to create the user, should I create it within the Corporate OU or the PLATTSBURG where the user works for? If I'm not mistaken, after creating the user on the AD, that should replicate to the watchguard and then we should be able to create the Mobile VPN user, right? @Sergey Starodub https://docs.google.com/document/d/1neBcH2m-8-3-tAc0Q3S-cSMzUbleQgEVHd4qV-9yxkg/edit?tab=t.0

application/vnd.google-apps.document VPN setup for PDS

Tech B 2024-12-17 18:52

Yes I believe it should be corporate

Tech B 2024-12-17 18:53

Compare with another existing user and add to appropriate groups

Tech A 2024-12-17 18:55

Will create it under corporate OU, if not I guess we should be able to move it to another OU, because on the other OU's only shows users with hostnames, such as

image/png image.png

**Active Directory Users and Computers** console is open, connected to domain **pdsmgmt.local**, with the **Plattsburgh** OU selected. The right pane displays user accounts named with the prefix **PLATT-** followed by designations including CART01–02, DR01–02, FD01–03, OP01–06, and **PLATT-XRAY1** (currently selected/highlighted). A **Security Group** object named **Plattsburgh** is also visible at the bottom of the list.

Tech C 2024-12-17 19:39

as the article states, all users should be created on the terminal server which is located in the Data center as connect to the firewall at the data center

Tech C 2024-12-17 19:39

all you need to do is create a user under the Corporate OU

Tech C 2024-12-17 19:40

then use that account to authenticate with the pds-dc1.dhmbackup.com

---
title: "Create Mobile VPN User for PDS Practice in Active Directory"
category: accounts-and-access
tags: ["activation", "vpn-remote", "active-directory"]
source_thread_id: "spaces/AAAA05BdS6s/threads/ojKA_gh4S2s"
source_space: "spaces/AAAA05BdS6s"
generated_at: "2026-04-22T14:08:01"
participants: ["Tech A", "Tech B", "Tech C"]
---

# Create Mobile VPN User for PDS Practice in Active Directory

## Problem
A technician needed to set up a new Mobile VPN user for a doctor at North Country Pediatric Dentistry (PDS) but was unsure which Active Directory organizational unit (OU) to use when creating the user account. The user did not exist in AD on the HQ-SVR1 domain controller, and the setup documentation did not specify the correct OU placement.

## Resolution
1. Create the new user account in the **Corporate OU** within Active Directory
2. Compare the new user with existing users to determine appropriate group memberships
3. Add the user to the same groups as similar existing users
4. The user creation will replicate to the WatchGuard firewall automatically
5. Use the created account to authenticate with pds-dc1.dhmbackup.com
6. Create the Mobile VPN user configuration in WatchGuard using the replicated AD account

Note: Other OUs like Plattsburgh contain only computer accounts with hostname prefixes (PLATT-CART01, PLATT-DR01, etc.) and security groups, not user accounts for VPN access.

## References
- Source discussion: `spaces/AAAA05BdS6s/threads/ojKA_gh4S2s`
- Attachments: - ![VPN setup for PDS](../attachments/ojKA_gh4S2s.ojKA_gh4S2s/VPN setup for PDS) - ![image.png](../attachments/ojKA_gh4S2s.zZdJnM9n3uk/image.png) — **Active Directory Users and Computers** console is open, connected to domain **pdsmgmt.local**, with the **Plattsburgh** OU selected. The right pane displays user accounts named with the prefix **PLATT-** followed by designations including CART01–02, DR01–02, FD01–03, OP01–06, and **PLATT-XRAY1** (currently selected/highlighted). A **Security Group** object named **Plattsburgh** is also visible at the bottom of the list.

Generated article

draft