Raritan Dominion SX16, Инструкция по установке и эксплуатации, Страница: 109 / 162

A
PPENDIX
D: RADIUS S
ERVER
95
K. Add a User Account
1. Open Active Directory Users and Computers.
2. In the Console Tree, double-click on the domain node.
3. In the Details pane, right-click on the organizational unit to which you want to add the user, point to
New and
select User .
4. In the First Name field, type the user's first name.
5. In the Initials field, type the user's initials.
6. In the Last Name field, type the user's last name.
7. Modify Full Name as desired.
8. In the User Logon Name field, type the name that will be used to log on and select the UPN suffix that must be
appended to the user logon name (following the @ symbol) from the drop-down list. If the user will use a
different name to log on from computers running Windows NT, Windows 98, or Windows 95, change the user
logon name as it appears in
User Logon Name (pre-Windows 2000) to the different name.
a. In Password and Confirm password fields, type the user's password.
b. Select the appropriate password options.
Notes :
→
To open Active Directory Users and Computers, select Start
→
Programs
→
Administrative
Tools
→
Active Directory Users and Computers .
→
To add a user, you can click on the new user shortcut icon in the toolbar.
→
After creating a user account, edit the user account properties to enter additional user account
information.
→
To add a user, you can copy any previously created user account.
→
A new user account with the same name as a previously deleted user account does not
automatically assume the permissions and memberships of the previously deleted account,
because the security descriptor for each account is unique. All permissions and memberships must
be manually recreated to duplicate a deleted user account.
L. Create Groups in Active Directory and Add User Accounts
This procedure provides guidelines to assign different roles (Administrative, Operator and Observer) to domain
users and add respective groups to the corresponding IAS policy. For instance, create the following groups:
RASAdmin, RASOperator, RASObserver. Then assign the appropriate users to these groups.
1. Open Active Directory Users and Computers.
2. In the console tree, click on the domain node.
3. In the details pane, right-click the organizational unit to which you want to add the group, point to
New and
select Group .
4. In Group name , type the group name, for example, RASAdmin.
5. Under Group scope , select Global .
6. Under Group type , select Security .
7. Click on the [ OK ] button.
8. Create two other types of groups, for example, RASOperators and RASObserver.
9. Add users to these groups depending upon types of access to be given.
a. Right-click on the group and select Properties from the drop-down menu.
b. Click on the Members tab.
c. Click on Add and select the users to add to this group.
10. Add these groups in respective IAS policies to assign appropriate user roles to domain users.
a. Open IAS.
b. Right-click on Policy and select Properties from the drop-down menu.
c. Click Add under Specify the conditions to match .