Emerson Avocent AutoView 2108, Инструкция по установке и эксплуатации

Страница: 51 / 72

OBWI Operation ..... 45
• Group Attribute – A username, password and group query is made to the directory service for an
appliance and attached target devices when using Query Mode (Appliance), or for a selected target
device when using Query Mode (Target Device). If a group is found containing the user and the
appliance name, the user is given access to the appliance or attached target devices, depending on the
group contents, when using Query Mode (Appliance). If a group is found containing the user and target
device IDs, the user is given access to the selected target device connected to the appliance when
using Query Mode (Target Device).
Groups can be nested to a maximum of 16 levels in depth. Use nesting to create groups within other
groups. For example, you may have a top-level group named Computers that contains a member named
R&D, which is a group. The R&D group may contain a member named Domestic, which is a group, and
so on.
The following is an example of groups defined in Active Directory.
Active Directory - Define Groups
Setting up Active Directory for Performing Queries
Before you can use any of the querying modes for units, you must first make changes to Active Directory so
that the selected querying mode can assign the applicable authorization level for the user.
To set up group queries:
1. Log into Windows with administrator privileges.
2. Open the Active Directory software.
3. Create an organizational unit to be used as a group container.
4. Create a computer object in Active Directory with a name identical to the switching system name for
querying appliances (specified in the Appliance Overview screen of the OBWI), or identical to the
attached target devices for querying target devices. The name must match exactly, including case.
5. The appliance names and target device names used for group queries are stored in the appliance. The
appliance name specified in the Appliance Overview screen of the OBWI and target device names must
identically match the object names in Active Directory. Each appliance name and target device name