Figure 5-3. Setting Up Active Directory Objects in Multiple Domains

 

Domain1

Domain2

 

 

AO1

AO2

Group1

Priv1

Priv2

User1

User2

User3

RAC1

RAC2

To set up the objects for the multiple domain scenario, perform the following tasks:

1Ensure that the domain forest function is in Native or Windows 2003 mode.

2Create two Association Objects, AO1 (of Universal scope) and AO2, in any domain. The figure shows the objects in Domain2.

3Create two RAC Device Objects, RAC1 and RAC2, to represent the two DRAC 4 cards.

4Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (administrator) and Priv2 has login privileges.

5Group user1 and user2 into Group1. The group scope of Group1 must be Universal.

6Add Group1 as Members in Association Object 1 (AO1), Priv1 as Privilege Objects in AO1, and RAC1, RAC2 as RAC Devices in AO1.

7Add user3 as Members in Association Object 2 (AO2), Priv2 as Privilege Objects in AO2, and RAC2 as RAC Devices in AO2.

Using the DRAC 4 With Microsoft® Active Directory

89

Page 89
Image 89
Dell Remote Access Controller 4 Firmware Version 1.30 manual AO1