Every user that requires access to ForestSafe has to authenticate via a windows domain account. ForestSafe stores a list of Windows Active Directory Groups, and these groups are configured within the product, to gives access to and customise how the system appears to End Users. Within the Active directory, domain users with membership of the groups are granted ForestSafe access. All ForestSafe security is configured through standard Windows security.