Setting Up Active Directory For Performing Queries - Avocent AUTOVIEW 3008 Installer/User Manual

• Basic – A username and password query for the user is made to the directory service. If they
are verified, the user is given appliance administrator access to the appliance and any attached
target devices for Query Mode (Appliance), or to any selected server for Query Mode (Server).
• User Attribute – A username, password and Access Control Attribute query for the appliance
user is made to the directory service. The Access Control Attribute is read from the user object
(the user account) in Active Directory.
If the KVM Appliance Admin value is found, the user is given appliance administrator access
to the appliance and any attached target devices for Query Mode (Appliance), or to any
selected target device for Query Mode (Server).
If the KVM User Admin value is found, the user is given user administrator access to the
appliance and attached target devices for Query Mode (Appliance), or to any selected server
for Query Mode (Server). If the KVM User value is found, the user is given User access to the
appliance for Query Mode (Appliance), or to any selected server for Query Mode (Server).
NOTE: If none of the three values are found, the user is given no access to the appliance and servers for Query
Mode (Appliance) or to any selected target device for Query Mode (Server), unless the user has User Admin or
Appliance Admin privileges to the appliance.
• Group Attribute – A username, password and group query is made to the directory service for
an appliance and attached target devices when using Query Mode (Appliance), or for a selected
server when using Query Mode (Server). If a group is found containing the user and the
appliance name, the user is given access to the appliance or attached target devices, depending
on the group contents, when using Query Mode (Appliance). If a group is found containing the
user and server IDs, the user is given access to the selected server connected to the appliance
when using Query Mode (Server).
Groups can be nested to a maximum of 16 levels in depth. Use nesting to create groups within
other groups. For example, you may have a top-level group named Computers that contains a
member named R&D, which is a group. The R&D group may contain a member named
Domestic, which is a group, etc.

Setting up Active Directory for performing queries

Before you can use any of the querying modes for units, you must first make changes to Active
Directory so that the selected querying mode can assign the applicable authorization level for the
user.
To set up group queries:
1. Log into Windows with administrator privileges.
2. Open Active Directory software.
3. Create an organizational unit to be used as a group container.
4. Create a computer object in Active Directory with a name identical to the switching system
name for querying appliances (specified in the Appliance Overview screen of the OBWI), or
Chapter 4: Web Interface Operations 63