Raritan DOMINION SX -, Installation And Operation Manual

Page: 123 / 172

A
PPENDIX
D: RADIUS S
ERVER
113
K. Add a User Account
1. Open Active Directory Users and Computers.
2. In the Console Tree, double-click on the domain node.
3. In the Details pane, right-click on the organizational unit to which you want to add the user, point to
New and select User .
4. In the First Name field, type the user's first name.
5. In the Initials field, type the user's initials.
6. In the Last Name field, type the user's last name.
7. Modify Full Name as desired.
8. In the User Logon Name field, type the name that will be used to log on and select the UPN suffix that
must be appended to the user logon name (following the @ symbol) from the drop-down list. If the
user will use a different name to log on from computers running Windows NT, Windows 98, or
Windows 95, change the user logon name as it appears in
User Logon Name (pre-Windows 2000) to
the different name.
a.
In Password and Confirm password fields, type the user's password.
b. Select the appropriate password options.
Notes :
→
To open Active Directory Users and Computers, select Start
→
Programs
→
Administrative Tools
→
Active Directory Users and Computers .
→
To add a user, you can click on the new user shortcut icon in the toolbar.
→
After creating a user account, edit the user account properties to enter additional user account
information.
→
To add a user, you can copy any previously created user account.
→
A new user account with the same name as a previously deleted user account does not automatically
assume the permissions and memberships of the previously deleted account, because the security
descriptor for each account is unique. All permissions and memberships must be manually recreated to
duplicate a deleted user account.
L. Create Groups in Active Directory and Add User Accounts
This procedure provides guidelines to assign different roles (Administrative, Operator and Observer) to
domain users and add respective groups to the corresponding IAS policy. For instance, create the following
groups: RASAdmin, RASOperator, RASObserver. Then assign the appropriate users to these groups.
1.
Open Active Directory Users and Computers.
2. In the console tree, click on the domain node.
3. In the details pane, right-click the organizational unit to which you want to add the group, point to New
and select Group .
4. In Group name , type the group name, for example, RASAdmin.
5. Under Group scope , select Global .
6. Under Group type , select Security .
7. Click on the [ OK ] button.
8. Create two other types of groups, for example, RASOperators and RASObserver.
9. Add users to these groups depending upon types of access to be given.
a.
Right-click on the group and select Properties from the drop-down menu.
b. Click on the Members tab.
c. Click on Add and select the users to add to this group.
10. Add these groups in respective IAS policies to assign appropriate user roles to domain users.
a.
Open IAS.
b. Right-click on Policy and select Properties from the drop-down menu.
c. Click Add under Specify the conditions to match .
d. From the Attribute types pop-up menu, click on Windows-Groups
e. Click on the [ Add ] button.
f. Click on Groups menu.