---
title: "Creating Microsoft Active Directory Credentials"
canonical: "https://docs.infoblox.com/space/UniversalAssetInsights/1693876284/Creating%20Microsoft%20Active%20Directory%20Credentials"
format: markdown
---
Before configuring discovery for Microsoft Active Directory, you must create credentials on the Infoblox Portal.

Complete the following steps:

1. Go to **System > Administration > Credentials**.
2. Choose **Create > Microsoft Active Directory**.
3. Specify the following fields in the **Create Microsoft Active Directory Credentials** screen:
  - **Name** (*Required*): A user-friendly label you assign to this credential set. This helps you identify it later when multiple AD integrations are configured. *Example*: “AD Discovery – Corporate Domain”
  - **Description** (*Optional*): A text field where you can provide additional details about the purpose or scope of this credential. *Example*: “Used for discovering domain controllers in the corporate AD forest.”
  - **Username** (*Required*): The Active Directory account name in UPN format (example: `admin@corpdomain.com`), with sufficient privileges to perform discovery operations.
  - **Password** (*Required*): The password associated with the specified AD account. Ensure this account has read access to the necessary AD objects.
  - **Tags** *(Optional)*: Specify tags for categorizing and searching credentials. For more information, see <u>*[Managing Tags](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneDDI/pages/186745865)*</u>.
4. Click **Save & Close**.


### Create Credentials for DNS management

To configure a Discovery Job to manage Windows based DNS from the Infoblox Portal credentials for an AD User must be added to the Infoblox Portal. The user(s) must be added to the appropriate AD groups, and have the following permissions as listed below:

- DNS Admins
- Domain Users
- Remote Management Users

The following permissions must also be added in each instance where the DNS service is hosted on a Windows Member server:

- Local Administrator (on the Windows Member server)
- Full control for the following registry entry: `KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server`

### Create Credentials for DHCP management

To configure a Discovery Job to manage Windows based DHCP from the Infoblox Portal, credentials for an AD User must be added to the Infoblox Portal. The user(s) must be added to the appropriate AD groups as listed below:

- DHCP Administrator
- Remote Management Users