Users Guide

Using Microsoft Active Directory 149
Using Microsoft Active Directory
Controlling Access to Your Network
If you use Active Directory
®
service software, you can configure it to control
access to your network. Dell has modified the Active Directory database to
support remote management authentication and authorization. Dell™
OpenManage™ IT Assistant and Dell OpenManage Server Administrator,
as well as Integrated Dell Remote Access Controllers (iDRAC), Dell Remote
Access Controllers (DRAC), can now interface with Active Directory.
With this tool, you can add and control users and privileges from one central
database.
Only iDRAC6 is supported on xx1x systems. For information on using iDRAC
with Microsoft Active directory, see the
Integrated Dell Remote Access
Controller User's Guide.
For information on using DRAC with Microsoft Active directory, see the Dell
Remote Access Controller 4 User’s Guide
and Dell Remote Access Controller 5
User’s Guide
.
NOTE: Using Active Directory to recognize iDRAC, DRAC, IT Assistant, or
Server Administrator users is supported on the Microsoft
®
Windows Server
®
2003
and Windows Server 2008 operating systems.
Active Directory Schema Extensions
The Active Directory data exists in a distributed database of Attributes and
Classes. An example of a Active Directory Class is the User class. Some
example Attributes of the user class might be the user’s first name, last name,
phone number, and so on. Every Attribute or Class that is added to an
existing Active Directory schema must be defined with a unique ID.
To maintain unique IDs throughout the industry, Microsoft maintains a
database of Active Directory Object Identifiers (OIDs).
The Active Directory schema defines the rules for what data can be included
in the database. To extend the schema in Active Directory, Dell received
unique OIDs, unique name extensions, and unique linked attribute IDs for
the new attributes and classes in the directory service.