When adding members to an AD LDS group, you can add security principals that reside in AD LDS instances or in Active Directory domains. Examples of security principals are AD LDS users, and Active Directory domain users and groups.
- To add or remove members to or from an AD LDS group
- In the console tree, under AD LDS (ADAM), locate and select the container that holds the group.
- In the details pane, right-click the group, and click Properties.
- On the Members tab in the Properties dialog box, click Add.
- Use the Select Objects dialog box to locate and select the security principals that you want to add to the group. When finished, click OK.
- On the Members tab, select the group members that you want to remove from the group, and then click Remove.
- After making the changes that you want to the group, click OK to close the Properties dialog box.
When using the Select Objects dialog box to locate a security principal, you first need to specify the AD LDS directory partition or Active Directory domain in which the security principal resides: click Browse and select the appropriate partition or domain.
It is only possible to select security principals that reside in managed AD LDS instances or Active Directory domains; that is, you can select security principals from only the instances and domains that are registered with Active Roles.