19-8
XMS Configuration Guide
User Rights Management
Configuring the Policy Store in Active Directory
Before using the Authorization Manager, system administrators must create and configure a
Policy Store repository. The Policy Store contains the AzMan-related configuration and
Vertigo Suite access restrictions. It is manipulated via a Microsoft Management Console
snap-in. Through the snap-in’s user interface, access to various components of the Vertigo
Suite can be restricted.
Prior to configuring the Policy Store, the type and location of the repository must be
determined. The repository can be housed in two types of containers; an
XML
FILE
or a node
in an
A
CTIVE
D
IRECTORY
installation of Windows 2003 functional level domain.
The preferred repository is an Active Directory node, as it is best for multi-user environments.
Nevertheless, certain situations might call for an XML repository (see
page 19-22
).
Choose the
A
CTIVE
D
IRECTORY
type when:
•
you are working within a Microsoft Windows 2003 network domain
•
you want multiple users to access the policy store
•
you want to restrict access to the policy store
Figure 19-6. User rights management configuration with Policy Store in Active Directory
N
O T E
Configuring the Policy Store in an Active Directory should only be attempted by system
administrators and IT personnel whose responsibilities grant them jurisdiction over system
and network security. These professionals must also possess a solid understanding and
experience of Windows networking, including Windows Servers 2003, Active Directory,
Windows users management, as well as the Microsoft Authorization Manager.