Active Directory, 3rd Edition

ADAM R2 Updates

There were several changes in the ADAM R2 release. Unless otherwise noted, these changes apply both to ADAM R2 and the Service Pack 1 release for RTW ADAM V1.0. Most of these changes are directly related to feedback from administrators and developers who took the time to post in the various Active Directory newsgroups or submit requests to Microsoft. The Microsoft Directory Services group is very responsive to feedback; if you have suggestions for improvement or have found issues, be sure to document the ideas and post them in the Active Directory newsgroups.

Users in the Configuration Partition

ADAM now allows you to create user and userProxy objects in the configuration partition. These users can then be added to any group in any partition. So you could add the user to the configuration partition's administrators group, which is nested in the administrators group of all application partitions. The change allows an ADAM user to administrate an ADAM instance instead of having the requirement to use a Windows user. This new capability is enabled by setting ADAMAllowADAMSecurityPrin-cipalsInConfigPartition=1 in the msDS-Other-Settings attribute of the Directory Service object.

Password Reset/Change Chaining to Windows

Password change requests to bindable proxy objects (such as userProxy) are now chained directly to Windows. Previously Windows user passwords needed to be managed within Windows and any requests sent to ADAM returned an error. No configuration ...