サポートと今すぐチャット
サポートとのチャット

Active Roles 8.1.3 - Evaluation Guide

Introduction Test lab setup Managing users and groups Delegating administration Using Managed Units Using Active Roles policies Managing Exchange recipients Managing permissions in Active Directory Using dynamic groups Delegating computer resource management Using audit trail and reporting Using Active Roes replication Customizing the Web Interface

Test the User Logon Name Generation policy

The policy effect on the user creation operation is as follows. On the user creation forms, the Active Roles user interfaces provide a Generate button to create a pre-Windows 2000 user logon name in accordance with the policy rule. In the event of a naming conflict, clicking the Generate button causes the policy to add a uniqueness number to the name.

You can use the following steps to verify the policy behavior in the Active Roles console.

To verify the policy behavior using the Active Roles console

  1. Create the user account for the first user:
    1. In the console tree, right-click an OU, and select New | User.
    2. In First name, type John; in Last name, type Smitson.
    3. Click the button next to the User logon name (pre-Windows 2000) box.

      This will generate JSmitson.

    1. Complete the creation of the user account.
  1. Create the user account for the second user:
    1. In the console tree, right-click an OU, and select New | User.
    2. In First name, type Jane; in Last name, type Smitson.
    3. Click the button next to the User logon name (pre-Windows 2000) box.

      This will generate J1Smitso, because the name JSmitson is in use.

    1. Complete the creation of the user account.
  2. Create the user account for the third user:
    1. In the console tree, right-click an OU in your test domain, and select New | User.
    2. In First name, type Joanne; in Last name, type Smitson.
    3. Click the button next to the User logon name (pre-Windows 2000) box.

    This will generate J2Smitso, since both the JSmitson and J1Smitso names are in use.

    1. Complete the creation of the user account.

Scenario 2: Using multiple rules

The policy described in this scenario uses multiple rules to generate the pre-Windows 2000 user logon name based on the following rules:

  1. The first character of the user first name, followed by the user last name
  2. The first two characters of the user first name, followed by the user last name
  3. The first three characters of the user first name, followed by the user last name

The length of the policy-generated name is at most 8 characters. If the name is longer, trailing characters are truncated as needed.

Examples of names generated by this policy are as follows:

  • JSmitson
  • JoSmitso
  • JohSmits

The policy generates the name JoSmitso for the user John Smitson if the name JSmitson is in use. If both JSmitson and JoSmitso are in use, the policy generates the name JohSmits.

If the policy fails to generate a unique name, it allows a name to be specified manually.

To implement this scenario, you might re-configure the User Logon Name Generation Policy Object, used in the previous scenario.

Configure the Policy Object

Use the Active Roles console to make the appropriate changes to the User Logon Name Generation Policy Object.

To modify the Policy Object

  1. In the Active Roles console, right-click the User Logon Name Generation Policy Object, and click Properties.
  2. On the Policies tab, select the policy, and then click View/Edit.
  3. Remove the uniqueness number entry from the first rule:
    1. On the Generation Rules tab, select the rule, and then click View/Edit.
    2. In the Configure Value dialog box, select the Uniqueness number entry, click Remove, and then click OK.
  4. Add the second rule:
    1. On the Generation Rules tab, click Add.
    2. In the Configure Value dialog box, click Add.
    3. In the Add Entry window:
      1. Select the User Property entry type
      2. Select the First name property
      3. Click The first and then type 2
      4. Click OK
    4. In the Configure Value dialog box, click Add.
    5. In the Add Entry window:
      1. Select the User Property entry type
      2. Select the Last name property
      3. Click OK
    6. In the Configure Value dialog box, click OK.
  5. Repeat Step 4, modifying Sub-step c) as follows in order to add the third rule: Click The first and then type 3.
  6. On the Generation Rules tab, select the Allow manual edits of pre-Windows 2000 logon name check box, and then click Only if a unique name cannot be generated by this policy.
  7. Click OK to close the User Logon Name Generation Policy Properties dialog box.
  8. Click OK to close the Properties dialog box for the Policy Object.

Test the User Logon Name Generation policy

The policy effect on the user creation operation is as follows. On the user creation forms, the Active Roles user interfaces provide a Generate button to create a pre-Windows 2000 user logon name in accordance with the policy rules. In the event of a naming conflict, clicking the Generate button causes the policy to apply a subsequent rule.

You can use the following steps to verify the policy behavior in the Active Roles console.

To verify the policy behavior using the Active Roles console

  1. Create the user account for the first user:
    1. In the console tree, right-click an OU, and select New | User.
    2. In First name, type Jack; in Last name, type Smitson.
    3. Click the button next to the User logon name (pre-Windows 2000) box.

      This will generate JaSmitso. The policy applies the second rule.

    1. Complete the creation of the user account.
  2. Create the user account for the second user:
    1. In the console tree, right-click an OU, and select New | User.
    2. In First name, type Jay; in Last name, type Smitson.
    3. Click the button next to the User logon name (pre-Windows 2000) box.

      This will generate JaySmits. The policy applies the third rule.

    1. Complete the creation of the user account.
  3. Create the user account for the third user:
    1. In the console tree, right-click an OU, and select New | User.
    2. In First name, type Jaycob; in Last name, type Smitson.
    3. Click the button next to the User logon name (pre-Windows 2000) box.

    In this case, the policy fails to generate a unique name since each of the three generation rules returns a name that is in use by an existing user account in your test domain. The console prompts you to specify a name because the policy is configured to allow this action in the situation where it cannot generate a unique name.

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択