Users Guide

Installing Dell extension to the Active Directory users and computers snap-in
When you extend the schema in Active Directory, you must also extend the Active Directory Users and Computers Snap-in so
the administrator can manage iDRAC devices, users and user groups, iDRAC associations, and iDRAC privileges.
When you install your systems management software using the Dell Systems Management Tools and Documentation DVD,
you can extend the Snap-in by selecting the Active Directory Users and Computers Snap-in option during the installation
procedure. See the Dell OpenManage Software Quick Installation Guide for additional instructions about installing systems
management software. For 64-bit Windows Operating Systems, the Snap-in installer is located under:
<DVDdrive>:\SYSMGMT\ManagementStation\support\OMActiveDirectory_SnapIn64
For more information about the Active Directory Users and Computers Snap-in, see Microsoft documentation.
Adding iDRAC users and privileges to Active Directory
Using the Dell-extended Active Directory Users and Computers Snap-in, you can add iDRAC users and privileges by creating
device, association, and privilege objects. To add each object, perform the following:
● Create an iDRAC device Object
● Create a Privilege Object
● Create an Association Object
● Add objects to an Association Object
Creating iDRAC device object
To create iDRAC device object:
1. In the MMC Console Root window, right-click a container.
2. Select New > Dell Remote Management Object Advanced.
The New Object window is displayed.
3. Enter a name for the new object. The name must be identical to iDRAC name that you enter while configuring Active
Directory properties using iDRAC Web interface.
4. Select iDRAC Device Object and click OK.
Creating privilege object
To create a privilege object:
NOTE: You must create a privilege object in the same domain as the related association object.
1. In the Console Root (MMC) window, right-click a container.
2. Select New > Dell Remote Management Object Advanced.
The New Object window is displayed.
3. Enter a name for the new object.
4. Select Privilege Object and click OK.
5. Right-click the privilege object that you created, and select Properties.
6. Click the Remote Management Privileges tab and assign the privileges for the user or group.
Creating association object
To create association object:
NOTE: iDRAC association object is derived from the group and its scope is set to Domain Local.
1. In the Console Root (MMC) window, right-click a container.
2. Select New > Dell Remote Management Object Advanced.
This New Object window is displayed.
3. Enter a name for the new object and select Association Object.
4. Select the scope for the Association Object and click OK.
5. Provide access privileges to the authenticated users for accessing the created association objects.
Configuring user accounts and privileges
157