beautypg.com

Configuring the policy store in active directory – Grass Valley Xmedia Server Vertigo Suite v.5.0 User Manual

Page 233

background image

20-8

XMS Configuration Guide

User rights management

Configuring the Policy Store in Active Directory

Before using the Authorization Manager, system administrators must create and configure a
Policy Store repository. The Policy Store contains the AzMan-related configuration and
Vertigo Suite access restrictions. It is manipulated via a Microsoft Management Console
snap-in. Through the snap-in’s user interface, access to various components of the Vertigo
Suite can be restricted.

Prior to configuring the Policy Store, the type and location of the repository must be
determined. The repository can be housed in two types of containers; an XML

FILE

or a node

in an A

CTIVE

D

IRECTORY

installation of Windows 2003 functional level domain.

The preferred repository is an Active Directory node, as it is best for multi-user environments.
Nevertheless, certain situations might call for an XML repository (see

page 20-22

).

Choose the A

CTIVE

D

IRECTORY

type when:

• you are working within a Microsoft Windows 2003 network domain
• you want multiple users to access the policy store
• you want to restrict access to the policy store

Figure 20-6. User rights management configuration with Policy Store in Active Directory

N

OTE

Configuring the Policy Store in an Active Directory should only be attempted by system
administrators and IT personnel whose responsibilities grant them jurisdiction over system
and network security. These professionals must also possess a solid understanding and
experience of Windows networking, including Windows Servers 2003, Active Directory,
Windows users management, as well as the Microsoft Authorization Manager.