Policy Server Guides › Policy Server Configuration Guide › User Directories › How to Configure a Windows Directory Connection › Configure a Windows Directory Connection

Configure a Windows Directory Connection

You can configure a user directory connection that lets the Policy Server communicate with a WinNT user store.

To configure the directory connection

1. Click Infrastructure, Directory.
2. Click User Directory, Create User Directory.

   The Create User Directory pane opens.

   Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

3. Select WinNT from the Namespace list.

   WinNT settings open.

4. Complete the remaining required connection information on the General and Directory Setup group boxes for the WinNT domain, a computer within the WinNT domain, or a stand-alone WinNT computer.
   • WinNT domains

     To define a namespace that represents global users and groups in a WinNT domain, specify the name of the domain in the NT Domain Name field. SiteMinder supports domain authentication and trusted domain authentication for user accounts in domains for user accounts in domains.

     Note: The system on which the Policy Server is installed must have a computer account in the appropriate domain for domain authentication to work. If the system does not have a computer account in all domains in which users need to be authenticated, the appropriate trust relationships must be established between domains.

     You can change the NT account under which the Policy Server is running by opening the Services dialog from the Control Panel and changing the account under which the Policy Server is running to an account that has the necessary privileges to access the specified domain. This account must have the "Act As Part of Operating System" system privilege.

   • Individual WinNT computer in a domain

     To define a Namespace that represents local users and groups in a computer that is a member of a domain, specify the name of the domain followed by the name of the computer in the NT Domain Name field. The domain name and computer name must be separated by a forward slash (/). If you do not specify the name of the computer, performance during searches may suffer.

     Example: SampleDomain/Comp1

   • Stand-alone WinNT computer

     To define a namespace that represents local users and groups in a stand-alone computer, specify the name of the computer in the NT Domain Name field. The stand-alone computer must have a Policy Server installed on it in order for this namespace to be accessible. There may be an initial delay when the Policy Server accesses this namespace for the first time.

5. (Optional) Select Require Credentials on the Administrator Credentials group box, and type the user name and password of an administrator who has an account on the user directory in the fields on the group box.
6. (Optional) Specify the user directory profile attributes that are reserved for SiteMinder's use in the fields on the User Attributes group box.
7. (Optional) Click Create on the Attribute Mapping List group box.

   The Create Attribute Mapping pane opens.

8. Click Submit.

   The Create User Directory task is submitted for processing.