User's Manual

Using the CMC Directory Service 253
Figure 8-4. Setting Up Active Directory Objects in Multiple Domains
To configure the objects for the multiple domain scenario:
1
Ensure that the domain forest function is in Native or Windows 2003 mode.
2 Create two Association Objects, A01 (of Universal scope) and A02, in any
domain.
Figure 8-4 shows the objects in Domain2.
3 Create two RAC Device Objects, RAC1 and RAC2, to represent
the two CMCs.
4 Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all
privileges (administrator) and Priv2 has login privilege.
5 Group user1 and user2 into Group1. The group scope of Group1
must be Universal.
AO1 AO2
Priv2Priv1Group1
RAC2RAC1User3User2User1
Domain2Domain1