Managing Authorizations Using Windows Authorization Manager

The following sections discuss how to manage authorizations for users in Active Directory (AD).

Creating the authorization policy store

To create the authorization policy store, follow these steps:

1. Select Start > Windows System > Run. The application displays the Run dialog box.
2. Enter azman.msc in the Open field, and select OK. The application displays the Authorization Manager window.
3. Select the Authorization Manager node.
4. From the Action menu, select Options. The application displays the Options window.

   

5. Select Developer mode, and select OK. The application closes the Options window.
6. From the Action menu, select New Authorization Store. The application displays the New Authorization Store window.

   

7. Select the following options:
   • Active Directory or Active Directory Application Mode (ADAM)
   • Schema version 1.0
8. In the Store name field, enter the name of the AD authorization store and the domain name, using the following format.
   Example

   CN=AzManStoreAD,CN=Program Data, DC=weboffice,DC=local

   Note

   Make a note of the Store name, which will be used when configuring the web.config file during EOM and ETS installation.

9. Select OK. The following screen is displayed.

   

10. Right-click AzManStoreAD, and then select Properties. The application displays the AzManStoreAD Properties window.
11. Select the Security tab.

    

12. On the Security tab, select Reader from the Authorization Manager user role drop-down list.
13. Select Add and then search for the account the ASP.NET uses, for example NETWORK.

    

14. Select OK.
15. Close the AzManStoreAD Properties window.
16. In the Authorization Manger window, right-click AzManStoreAD, and then select New Application. The following window is displayed.

    

17. Enter an application name in the Name field (for example ADAzManApp), and then select OK. The process is now complete.