Owner's Manual


4. Click Add.

5. Select the Active Directory Users and Computers snap-in and click Add.

6. Click Close and click OK.

Adding Users and Privileges to Active Directory
The Dell-extended Active Directory Users and Computers snap-in allows you to add DRAC, Server Administrator, and IT Assistant users and privileges by
creatingRAC,Association,andPrivilegeobjects.Toaddanobject,performthestepsintheapplicablesubsection.

Creating a Product Object
In the Console Root (MMC) window, right-click a container.

1. Select New.

2. Select a RAC, Server Administrator, or IT Assistant object, depending on which you have installed.
The New Object window appears.

3. Type in a name for the new object. This name must match the Active Directory product name as discussed in "Configuring Active Directory Using CLI on
Systems Running Server Administrator".

4. Select the appropriate Product Object.

5. Click OK.

Creating a Privilege Object
PrivilegeObjectsmustbecreatedinthesamedomainastheAssociationObjecttowhichtheyareassociated.

1. In the Console Root (MMC) window, right-click a container.

2. Select New.

3. Select a RAC, Server Administrator, or IT Assistant object, depending on which you have installed.
The New Object window appears.

4. Type in a name for the new object.

5. Select the appropriate Privilege Object.

6. Click OK.

7. Right-click the privilege object that you created and select Properties.

8. Click the appropriate Privileges tab and select the privileges that you want the user to have (for more information, see Table9-2 and Table9-8).

Creating an Association Object
The Association Object is derived from a Group and must contain a group Type. The Association Scope specifies the Security Group Type for the Association
Object. When you create an Association Object, you must choose the Association Scope that applies to the type of objects you intend to add. Selecting
Universal,forexample,meansthatAssociationObjectsareonlyavailablewhentheActiveDirectoryDomainisfunctioninginNativeModeorabove.

1. In the Console Root (MMC) window, right-click a container.

NOTE: Server Administrator and IT Assistant users must use Universal-type Product Groups to span domains with their product objects.
NOTE: When adding Universal-type Product Groups from separate domains, you have to create an Association object with Universal scope. The default
Association objects created by the Dell Schema Extender utility are domain Local Groups and does not work with Universal-type Product Groups from
other domains.