allows you to ensure that group membership information is in sync in all connected data systems. For example, when creating a group object from an Active Directory domain to an AD LDS (ADAM) instance, you can configure rules to synchronize the Member attribute from the Active Directory domain to the AD LDS (ADAM) instance.
The Management Shell component of is an automation and scripting shell that provides a command-line management interface for synchronizing data between connected systems via the .
The Management Shell is implemented as a Windows PowerShell snap-in that extends the standard Windows PowerShell functionality. The cmdlets provided by the Management Shell conform to the Windows PowerShell standards and are fully compatible with the default command-line tools that come with Windows PowerShell.
The Management Shell allows administrators to perform attribute or password synchronization operations by using Windows PowerShell scripts. For example, you can compose and run a Windows PowerShell script that assigns values to the target object attributes using the values of the source object attributes. For more information, see Using PowerShell script to transform passwords.
With , you can create and configure synchronization rules to generate values of target object attributes. These rules support the following types of synchronization:
-
Direct synchronization: Assigns the value of a source object attribute to the target object attribute you specify.
-
Script-based synchronization: Allows you to use a Windows PowerShell script to generate the target object attribute value.
-
Rule-based synchronization: Allows you to create and use rules to generate the target object attribute value you want.
lets you create flexible rules for generating the distinguished names (DNs) of objects being created. These rules allow you to ensure that created objects are named in full compliance with the naming conventions existing in your organization.