Contents

Introduction

Native UMRA actions

For a Microsoft Active Directory environment, UMRA contains many native actions. It is advised to use these (AD) actions to manage Active Directory. However, since Active Directory does also support LDAP, it is also possible to manage Active Directory objects using the UMRA LDAP actions. How to do that is described in this section.

Deployment scenario

In case no trust relation exists between the computer that runs the UMRA software and the Active Directory domain controllers, the LDAP actions can be used to manage Active Directory. In such an environment, the native UMRA actions cannot be used. Because of security reasons, such an environment should be configured using encrypted communication only.

This section describes how to:

• setup a secure Active Directory Windows 2003 LDAP environment.

and gives some example projects to:

• create a user account;
• reset passwords;
• update group memberships.