Users Guide
In the Console Root (MMC) window, right-click a container.
1. Select New.
2. Select a RAC, Server Administrator, or IT Assistant object, depending on which you have installed.
The New Object window opens.
3. Type in a name for the new object. This name must match the Active Directory product name as discussed in "Configuring Active Directory Using CLI on
Systems Running Server Administrator", or for a RAC device, the name that you will type in step 4 of "Configuring Your Systems or Devices", or for IT
Assistant, the name discussed in "Configuring Active Directory on Systems Running IT Assistant."
4. Select the appropriate Product Object.
5. Click OK.
Creating a Privilege Object
PrivilegeObjectsmustbecreatedinthesamedomainastheAssociationObjecttowhichtheyareassociated.
1. In the Console Root (MMC) window, right-click a container.
2. Select New.
3. Select a RAC, Server Administrator, or IT Assistant object, depending on which you have installed.
The New Object window opens.
4. Type in a name for the new object.
5. Select the appropriate Privilege Object.
6. Click OK.
7. Right-click the privilege object that you created and select Properties.
8. Click the appropriate Privileges tab and select the privileges that you want the user to have (for more information, see Table8-1 and Table8-10).
Creating an Association Object
The Association Object is derived from a Group and must contain a group Type. The Association Scope specifies the Security Group Type for the Association
Object. When you create an Association Object, you must choose the Association Scope that applies to the type of objects you intend to add. Selecting
Universal, for example, means that Association Objects are only available when the Active Directory Domain is functioning in Native Mode or above.
1. In the Console Root (MMC) window, right-click a container.
2. Select New.
3. Select a RAC, Server Administrator, or IT Assistant object, depending on which you have installed.
The New Object window opens.
4. Type in a name for the new object.
5. Select Association Object.
6. Select the scope for the Association Object.
7. Click OK.
Adding Objects to an Association Object
NOTE: Server Administrator and IT Assistant users must use Universal-type Product Groups to span domains with their product objects.
NOTE: When adding Universal-type Product Groups from separate domains, you have to create an Association object with Universal scope. The default
Association objects created by the Dell Schema Extender utility are domain Local Groups and will not work with Universal-type Product Groups from other
domains.