Installation manual

Using Microsoft Active Directory 117
Adding Users and Privileges to Active Directory
The Dell-extended Active Directory Users and Computers snap-in allows you
to add DRAC, Server Administrator, and IT Assistant users and privileges by
creating RAC, Association, and Privilege objects. To add an object,
perform the steps in the applicable subsection.
Creating a Product Object
To create a Product Object:
NOTE: Server Administrator and IT Assistant users must use Universal-type
Product Groups to span domains with their product objects.
NOTE: When adding Universal-type Product Groups from separate domains, you
have to create an Association object with Universal scope. The default Association
objects created by the Dell Schema Extender utility are domain Local Groups and
do not work with Universal-type Product Groups from other domains.
1 In the Console Root (MMC) window, right-click a container.
2
Select
New
.
3
Select a RAC, Server Administrator, or IT Assistant object, depending on
what you have installed.
The
New Object
window appears.
4
Type in a name for the new object. This name must match the
Active
Directory product name
as discussed in "Configuring Active Directory
Using CLI on Systems Running Server Administrator."
5
Select the appropriate
Product Object
.
6
Click
OK
.
Creating a Privilege Object
Privilege Objects must be created in the same domain as the Association
Object to which they are associated.
1
In the
Console Root
(MMC) window, right-click a container.
2
Select
New
.
3
Select a RAC, Server Administrator, or IT Assistant object, depending on
what you have installed.
The
New Object
window is displayed.