The temporal membership settings on a group member include the start time and end time settings.
The start time setting specifies when the object is to be actually added to the group. This can be specific date and time or an indication that the object should be added to the group right away.
The end time setting specifies when the object is to be removed from the group. This can be specific date and time or an indication that the object should not be removed from the group.
You can view or modify both the start time and end time settings using the Web Interface.
To view or modify the start or end time setting for a member of a group
-
In the Web Interface, select the group, then choose the Members command.
-
In the list on the Members page, select the member, then click the Temporary Access button.
-
Use the Temporal Membership Settings dialog to view or modify the start or end time settings.
The Temporal Membership Settings dialog box provides the following options:
-
Add to the group > Now Indicates that the object should be added to the group at once.
-
Add to the group > On this date Indicates the date and time when the object should be added to the group.
-
Remove from the group > Never Indicates that the object should not be removed from the group.
-
Remove from the group > On this date Indicates the date and time when the object should be removed from the group.
Regular members have the Add to group and Remove from group options set to Already added and Never, respectively. You can set a particular date for any of these options in order to convert a regular member to a temporal member.
NOTE:
-
You can view or modify the start time and end time settings by managing an object rather than the groups in which that object has memberships. Select the object, then choose the Member Of command. On the Member Of page, select the group for which you want to manage the start or end time setting of the object and click Temporary Access.
-
On the Members or Member Of page, you can change the start or end time setting for multiple members or groups at a time. On the page, select multiple list items, click Temporary Access, and in the Temporal Membership Settings dialog box, make the changes you want.
You can remove temporal group members in the same way as regular group members. Removing a temporal member of a group deletes the temporal membership settings for that object with respect to that group. As a result, the object will not be added to the group. If the object already belongs to the group at the time of removal, then it is removed from the group.
To remove a temporal member of a group
-
In the Web Interface, select the group, then choose the Members command.
-
On the Members page, select the member, and click Remove.
NOTE: You can remove an object that is a temporal member of a group by managing the object rather than the group. Select the object, then choose the Member Of command. On the Member Of page, select the group from the list and click Remove.
You can use the Web Interface to manage directory data in Microsoft Active Directory Lightweight Directory Services (AD LDS). Similarly to Active Directory domains, directory data can be managed in only the AD LDS instances that are registered with Active Roles (managed AD LDS instances).
The application directory partitions found on the managed AD LDS instances are grouped together in the AD LDS (ADAM) container, thus making it easy to locate the AD LDS data. Each directory partition is represented by a separate container (node) so you can browse the partition tree the same way you do for an Active Directory domain.
The Web Interface supports a wide range of administrative operations on AD LDS users, groups and other objects, so you can create, view, modify, and delete directory objects, such as users, groups, containers and organizational units, in AD LDS the same way you do when managing data in Active Directory.
To browse the directory tree in AD LDS directory partitions
-
On the Navigation bar, click Directory Management.
-
In the Browse pane, click the Tree tab.
-
On the Tree tab, do the following:
-
Expand the AD LDS (ADAM) container.
-
Under AD LDS (ADAM), expand a directory partition object to view its top-level containers.
-
Expand a top-level container to view the next level of objects in that container.
-
Do one of the following:
-
To move down a directory tree branch, continue expanding the next lowest container level on the Tree tab.
-
To administer a directory object at the current directory level, click a container on the Tree tab and use the instructions that follow.
To manage directory data in AD LDS
-
On the Tree tab in the Browse pane, under AD LDS (ADAM), click the container that holds the data you want to manage.
-
In the list of objects, select the object that represents the directory data you want to manage.
-
Use commands in the Command pane to perform management tasks.
NOTE: In the list of objects, clicking the name of a leaf object, such as a user or group, displays a page intended to view or modify object properties; clicking a container object, such as a partition or an Organizational Unit, displays a list of objects held in that container.
You can use the Web Interface to manage the following computer resources:
-
Services Start or stop a service, view or modify properties of a service.
-
Network file shares Create a file share, view or modify properties of a file share, stop sharing a folder.
-
Logical printers Pause, resume or cancel printing, list documents being printed, view or modify properties of a printer.
-
Documents being printed (print jobs) Pause, resume, cancel or restart printing of a document, view or modify properties of a document being printed.
-
Local groups Create or delete a group, add or remove members from a group, rename a group, view or modify properties of a group. Unavailable on domain controllers.
-
Local users Create or delete a local user account, set a password for a local user account, rename a local user account, view or modify properties of a local user account. Unavailable on domain controllers.
-
Devices View or modify properties of a logical device, start or stop a logical device.
To manage computer resources
-
In the Web Interface, locate the computer that hosts resources you want to manage. For instructions on how to locate objects in the Web Interface, see Locating directory objects.
-
Select the computer in the list of objects, then click Manage in the Command pane.
-
In the list of resource types, click the type of resource you want to manage.
-
In the list of objects that appears, select the resource you want to manage.
-
Use commands in the Command pane to perform management tasks on the selected resource.
To manage print jobs
-
Repeat Steps 1–2 of the previous procedure, to start managing computer resources.
-
In the list of resource types, click Printers to view a list of printers found on the computer you selected.
-
In the list of printers, select a printer whose print jobs you want to manage.
-
In the Command pane, click Print Jobs to view a list of documents being printed.
-
In the list of documents, select a document to pause, resume, restart, or cancel printing.
-
Use commands in the Command pane to perform management tasks on the selected document.
