You can use the Web Interface to manage directory data in Microsoft Active Directory Lightweight Directory Services (AD LDS). Similarly to Active Directory domains, directory data can be managed in only the AD LDS instances that are registered with Active Roles (managed AD LDS instances).
The application directory partitions found on the managed AD LDS instances are grouped together in the AD LDS (ADAM) container, thus making it easy to locate the AD LDS data. Each directory partition is represented by a separate container (node) so you can browse the partition tree the same way you do for an Active Directory domain.
The Web Interface supports a wide range of administrative operations on AD LDS users, groups and other objects, so you can create, view, modify, and delete directory objects, such as users, groups, containers and organizational units, in AD LDS the same way you do when managing data in Active Directory.
To browse the directory tree in AD LDS directory partitions
To manage directory data in AD LDS
On the Tree tab in the Browse pane, under AD LDS (ADAM), click the container that holds the data you want to manage.
|NOTE: In the list of objects, clicking the name of a leaf object, such as a user or group, displays a page intended to view or modify object properties; clicking a container object, such as a partition or an organizational unit, displays a list of objects held in that container.|
To manage computer resources
To manage print jobs
The Web Interface can be used to restore deleted objects in any managed domain that is configured to enable Active Directory Recycle Bin—a feature of Active Directory Domain Services introduced in Microsoft Windows Server 2008 R2.
To undo deletions, Active Roles relies on the ability of Active Directory Recycle Bin to preserve all attributes, including the link-valued attributes, of the deleted objects. This makes it possible to restore deleted objects to the same state they were in immediately before deletion. For example, restored user accounts regain all group memberships that they had at the time of deletion.
If Active Directory Recycle Bin is enabled in a managed domain, the Web Interface provides access to the Deleted Objects container that holds the deleted objects from that domain. On the Tree tab in the Browse pane, the Deleted Objects container appears at the same level as the domain object, under the Active Directory node. If multiple managed domains have Active Directory Recycle Bin enabled, then a separate container is displayed for each domain. To tell one container from another, the name of the container includes the domain name (for example, MyDomain.MyCompany.com - Deleted Objects).
When you select the Deleted Objects container, the Web Interface lists all the deleted objects that exist in the corresponding domain. The list can be sorted or filtered as appropriate to locate particular objects (see Managing the list of objects earlier in this document). If you click an object in the list, a menu appears that displays all actions you can perform on that object.
© 2020 One Identity LLC. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책