Deployment Guide
administrator pack installed on the local system. To install this administrator pack, click Start → Run,
type MMC, and press <Enter>.
2. Click File in the Console 1 window.
3. Click Add/Remove Snap-in.
4. Click Add.
5. Select the Active Directory Users and Computers snap-in and click Add.
6. Click Close and click OK.
Adding Users And Privileges To Active Directory
The extended Active Directory Users and Computers snap-in allows you to add DRAC and Server
Administrator users and privileges by creating RAC, Association, and Privilege objects. To add an object,
perform the steps in the applicable subsection.
Creating A Product Object
To create a Product Object:
NOTE: Server Administrator users must use Universal-type Product Groups to span domains with
their product objects.
NOTE: When adding Universal-type Product Groups from separate domains, create an Association
object with Universal scope. The default Association objects created by the Schema Extender utility
are domain Local Groups and do not work with Universal-type Product Groups from other domains.
1. In the Console Root (MMC) window, right-click a container.
2. Select New.
3. Select a RAC or Server Administrator object, depending on what you have installed.
The New Object window is displayed.
4. Type in a name for the new object. This name must match the Active Directory product name as
discussed in
Configuring Active Directory Using CLI on Systems Running Server Administrator.
5. Select the appropriate Product Object.
6. Click OK.
Creating A Privilege Object
Privilege Objects must be created in the same domain as the Association Object to which they are
associated.
1. In the Console Root (MMC) window, right-click a container.
2. Select New.
3. Select a RAC or Server Administrator object, depending on what you have installed.
The New Object window is displayed.
4. Type in a name for the new object.
5. Select the appropriate Privilege Object.
6. Click OK.
7. Right-click the privilege object that you created and select Properties.
8. Click the appropriate Privileges tab and select the privileges that you want the user to have.
Creating An Association Object
The Association Object is derived from a Group and must contain a group Type. The Association Scope
specifies the Security Group Type for the Association Object. When you create an Association Object,
47