NOTE: If you are planning to use multiple ADAM (AD LDS) Protection templates, see the Change Auditor Technical Insight Guide for more information about how multiple protection templates are evaluated. |
2 |
Click Protection. |
3 |
Select ADAM (AD LDS) in the Protection task list to open the ADAM (AD LDS) protection page. |
4 |
Click Add to open the ADAM (AD LDS) Protection wizard to specify the objects to protect. |
8 |
If you want to specify individual users or groups that are to be allowed to make changes to the protected object, click Next to display the Select Accounts Allowed (Not Allowed) to Access Protected Objects page. |
9 |
Click Finish to save the protection template, close the wizard and return to the ADAM (AD LDS) Protection page. |
NOTE: The Allow option is selected by default indicating that the selected users or groups will be allowed to change the protected objects. However, you can select the Deny option at the top of this page and select individual users or groups that are NOT allowed to change the protected objects. When using the Deny option, you are allowing all users and groups to change the protected objects except for those selected on this page. |
2 |
Click Finish to save your changes and return to the ADAM (AD LDS) protection page. |
1 |
On the ADAM (AD LDS) protection page, place your cursor in the Status cell for the protection template, click the arrow control, and select Disabled. |
2 |
1 |
On the ADAM (AD LDS) protection page, place your cursor in the Status cell for the object to be disabled, click the arrow control and select Disabled |
2 |
1 |
On the ADAM (AD LDS) protection page, select the template and click Delete | Delete Template. |
• |
2 |
1 |
On the ADAM (AD LDS) Protection page, select the object and click Delete | Delete Object. |
The ADAM (AD LDS) Protection wizard displays when you click Add or Edit on the ADAM (AD LDS) protection page. From the wizard, you can define the ADAM objects and attributes to protect from unauthorized modifications.
The following table provides a description of the available fields and controls:
Select ADAM (AD LDS) instance page: The first page of the wizard displays a list of ADAM (AD LDS) instances running a Change Auditor agent in your environment. | |||||
This list includes the following information about each ADAM (AD LDS) instance listed:
| |||||
Select ADAM (AD LDS) Objects to Protect page: On this page, enter a name for the template and select the objects to be protected. | |||||
After you have selected an object, click Add to add it to the list. | |||||
After you have selected an object, click Add to add it to the list. | |||||
| |||||
By default, the create, modify attributes and delete operations are selected. To change this setting, use the drop-down arrow in the Denied Operations cell and select or clear operations. | |||||
By default, the scope of coverage is set to This object only. To change this setting, use the drop-down menu in the Scope cell to select a different scope. | |||||
(Optional) Select Attributes to Protect page: By default all attributes for the selected objects will be protected. However, you can use this page to protect individual attributes or to exclude individual attributes from protection. | |||||
Use to move the attributes selected in the Attributes list over to the Selected Attributes list. | |||||
Selected Attributes list |
The list box to the right displays the attributes to be included in the protection template. | ||||
Use the Browse or Search page to select the user or group accounts. | |||||
Use the Browse or Search page to select the user or group accounts. | |||||
After you have selected an account, click Add to add it to the list. | |||||
After you have selected an account, click Add to add it to the list. | |||||
Use to modify the search options used to retrieve directory objects. | |||||
|
This page displays when you select Active Directory Database from the Protection task list in the navigation pane of the Administration Tasks tab. From here, you can start the Active Directory Database protection wizard to define your Active Directory Database protection template to protect your Active Directory database from unauthorized access. You can also edit existing templates, disable and enable templates, and remove templates that are no longer being used.
Once added, the following information is provided for each template:
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center