Users Guide

Table Of Contents
4. Group user1 and user2 into Group1.
5. Add Group1 as Members in Association Object 1 (A01), Priv1 as Privilege Objects in A01, and RAC1, RAC2 as RAC Devices in
A01.
6. Add User3 as Members in Association Object 2 (A02), Priv2 as Privilege Objects in A02, and RAC2 as RAC Devices in A02.
The following figure provides an example of Active Directory objects in multiple domains. In this scenario, you have two CMCs
(RAC1 and RAC2) and three existing Active Directory users (user1, user2, and user3). User1 is in Domain1, and user2 and user 3
are in Domain2. In this scenario, configure user1 and user 2 with administrator privileges to both CMCs and configure user3 with
login privileges to the RAC2 card.
Figure 10. Setting Up Active Directory Objects in Multiple Domains
To configure the objects for the multiple domain scenario:
1. Ensure that the domain forest function is in Native or Windows 2003 mode.
2. Create two Association Objects, A01 (of Universal scope) and A02, in any domain. The figure Setting Up Active Directory
Objects in Multiple Domains shows the objects in Domain2.
3. Create two RAC Device Objects, RAC1 and RAC2, to represent the two CMCs.
4. Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (administrator) and Priv2 has login privilege.
5. Group user1 and user2 into Group1. The group scope of Group1 must be Universal.
6. Add Group1 as Members in Association Object 1 (A01), Priv1 as Privilege Objects in A01, and RAC1, RAC2 as RAC Devices in
A01.
7. Add User3 as Members in Association Object 2 (A02), Priv2 as Privilege Objects in A02, and RAC2 as RAC Devices in A02.
Configuring Extended Schema Active Directory
To configure Active Directory to access CMC:
1. Extend the Active Directory schema.
2. Extend the Active Directory Users and Computers Snap-in.
3. Add CMC users and their privileges to Active Directory.
4. Enable SSL on each of your domain controllers.
5. Configure CMC Active Directory properties using CMC Web interface or RACADM.
Related concepts
Extending Active Directory Schema on page 136
Installing Dell Extension to the Active Directory Users and Computers Snap-In on page 139
Adding CMC Users and Privileges to Active Directory on page 139
Related tasks
Configuring Active Directory With Extended Schema Using CMC Web Interface on page 141
Configuring User Accounts and Privileges
135