Active Directory Query eXecutor

Last Updated: June 05, 2026

The Active Directory Query eXecutor (ADQX) is a PrinterLogic Service Agent that enables on-demand querying of a customer's on-premise Active Directory (AD) server without requiring firewall port exposure. ADQX uses a WebSocket connection to communicate with PrinterLogic, eliminating the need to open LDAP ports in your network perimeter.

Key Points

  • This feature is only available upon request, reach out to your Vasion representative for more details.
  • The Service Agent communicates outbound via WebSocket.
  • ADQX executes a limited, predefined set of AD queries, it does not have open-ended access to your directory.
  • ADQX supports asynchronous operations, including workflow processing that requires AD data at runtime.
  • All queries executed by ADQX are visible to admins in the PrinterLogic Admin Console, providing full transparency into directory activity.
  • With Use machine credentials (Windows SSPI) for this domain enabled, this Service Client uses its Windows domain account (SSPI) to bind to this Active Directory domain instead of the stored username and password. Only supported on Windows Service Clients that are joined to this domain.
  • When ADQX is enabled, the Test Settings button on the LDAP Settings page is unavailable. Use the Ping and Bind buttons on the ADQX tab of the Service Agent to verify your connection and credentials.

How It Works

When PrinterLogic needs to query your on-premise Active Directory to process a workflow or authenticate users, it sends a request to the ADQX Service Agent installed in your environment. ADQX receives the request over an outbound WebSocket connection, executes the appropriate query against your local AD server, and returns the result to PrinterLogic in a structured format.

The set of queries ADQX can execute is limited and defined by Vasion, ensuring your directory is not exposed to arbitrary lookups.

Administrators can review all queries ADQX has executed from the Admin Console, supporting auditability and compliance requirements.

Requirements

  • An LDAP Domain configured for your environment.
  • A Service Agent device running the ADQX service.
  • The Service Agent requires network access to your on-premis Active Directory server.
  • The Service Agent must be able to establish an outbound WebSocket connection to PrinterLogic.
    • No inbound firewall ports are required.

Next Steps