Windows 2000 Active Directory Configuration Guide

(1)

Windows 2000 Active Directory

Configuration Guide

(2)

Chapter 1 Introduction

2

2 1 About Metatude

3 2 About this manual

4 3 The Metatude suite

Chapter 2 AD configuration

5

5 1 Windows 2000 server 10 2 Exchange 2000

Chapter 3 MPM configuration

13

13 1 Add directory server

(3)

2 Introduction

1 Introduction

1.1 About Metatude

The Metatude software suite allows you to collect feedback on the performance and activities of your company from stakeholders such as customers, business partners, co-managers and employees. This information is vital to your company because it allows you to fine-tune your business activities and company policies to the perception of your performance. And it is this information that will allow you to gauge and influence what others say and think about your company, something that can make or break you. Essential information that constitutes the basis for your business decisions.

Metatude's web-based software allows you to collect feedback on issues such as:

· customer satisfaction and loyalty;

· employee commitment;

· corporate reputation;

· business ethics;

· service level management.

Metatude is designed for large organizations whose IT infrastructure may be complex and have many stakeholders. Once the software is installed you can easily define target groups, create questionnaires, conduct research and manage output for analysis and reporting tools.

(4)

1.2 About this manual

Windows 2000 server and Exchange 2000 use Active Directory (AD) to store user information. The AD can be accessed through the LDAP protocol. The Metatude Dialogue Server can use the LDAP protocol to retrieve stakeholder information from your Windows 2000 server and your Exchange 2000 server. It is usually not necessary to make any configuration changes to your Windows 2000 and Exchange 2000 setup in order to retrieve the stakeholder information. This manual guides you through the process of finding the right values in your AD storage for usage with the Metatude Project Manager.

With the Metatude Project Manager you can add stakeholder directories that can be used in your stakeholder feedback projects. This manual describes how to add your Windows 2000 and/or your Exchange 2000 server as a stakeholder directory. You can find more information about

stakeholder directories in the manual for the Metatude Project Manager.

(5)

4 Introduction

1.3 The Metatude suite

The Metatude software suite consists of four interacting software components:

1. Metatude Dialogue Server;

2. Metatude Channel Integration Components; 3. Metatude Dialogue Designer;

4. Metatude Project Manager.

The basis of the Metatude architecture is a central server (Metatude Dialogue Server) that needs to be installed in your organization. This server maintains the connections with databases, stores and serves the dialogues to stakeholders and collects and stores the collected data in a database. Once the Dialogue Server is installed, you can manage any stakeholder feedback with two desktop applications that are relevant for the regular user: the Metatude Dialogue Designer and the

Metatude Project Manager. Consultants, managers and researchers can use these two

applications to prepare questionnaires and manage projects involving stakeholder feedback.

1) Metatude Dialogue Server

The Metatude Dialogue Server (MDS) is the central component within the Metatude architecture. This server connects to databases and directories with stored stakeholder information,

communicates with electronic channels, stores and serves dialogues and writes results to a database. All the project information and intelligence to manage projects automatically resides on this server.

2) Metatude Channel Integration Components

The Metatude Channel Integration Components (MCIC) need to be installed on an electronic channel. This allows the channel to communicate with the central server.

3) Metatude Dialogue Designer

The Metatude Dialogue Designer (MDD) is a Windows application that is used to create questionnaires. With a simple and intuitive interface any user can learn how to create

questionnaires in a matter of minutes. Many question types are supported, e.g. open questions, multiple choice, multiple response, scale and matrix questions.

4) Metatude Project Manager

(6)

2 AD configuration

2.1 Windows 2000 server

Checking user information in your Windows 2000 Domain

First, check the configuration of your users in your Windows 2000 Domain. Open the 'Active Directory Users and Computers' from your start menu. You can also use the MMC and add the snap-in with the same name. You should then see an overview of the available domain(s), as shown in figure 1.

Figure 1. Active Directory users and Computers

(7)

6 AD configuration

Figure 2. User properties

If you do not use Exchange 2000, you must fill out the e-mail address for each user here. Also, make sure the 'Display name' attribute is in the correct format for usage with the MPM. This will be used to address the user in the e-mail invitations (s)he will receive upon invitation for research projects that were created with the MPM.

If you do use Exchange 2000, the e-mail address for the user is allready present. Please see the next chapter of this manual for an explanation of how the 'E-mail' attribute for each user is constructed by Exchange 2000.

Locating user information in the Active Directory Storage

If you are satisfied with the configuration of your users, the next step is to locate them in the Active Directory (AD) storage. This can be done by using any LDAP client, or AD client. The easiest way to locate your users is by installing 'ADSI Edit'. This tool is located on your Windows 2000 server CD-ROM, in the directory /SUPPORT/TOOLS/ . Simply run SETUP.EXE, and follow the on screen instructions. ADSI Edit will then be installed. Please install ADSI Edit on a computer that is logged into the Windows 2000 Domain.

(8)

Figure 3. ADSI Edit

Expand the node called 'Domain NC'. You will then see the appropriate LDAP name of your Domain. In the above figure it is called DC=office,DC=metatude,DC=com

Any LDAP name for an object in the AD (or other LDAP storage) is called a Distinguished Name (short: dn). In the right pane you see several objects that are part of your domain. Expand the Domain folder further, and click on the 'Users' folder, as shown in figure 4.

Figure 3. Users in the AD

(9)

same users and groups that are in the 'Active Directory Users and Computers' also. In the above example, the dn for the location of the users is CN=Users,DC=office,DC=metatude,DC=com ; it is the dn of the Domain with CN=Users, prepended to it. To construct the dn for the location of your users, use the LDAP name of your Domain, and prepend the names you see in the tree when browsing to your users. Just prepend each folder name as you progress deeper in the tree. Usually, the dn is just CN=Users,dn of your Domain but feel free to explore the AD tree if you cannot find your users directly.

If you've found the location of your users in your AD, please write it down. You can use this name in the MPM when adding a new directory server. This dn is called the 'base'.

Verifying the user information in the Active Directory Storage

If you want to, you can verify if you have found the correct information of your users. To verify the correct username and e-mail address, right click on any user, and choose properties. You will be presented with a screen as shown in figure 4.

Figure 4. Properties for a user, DisplayName

(10)

Figure 5. Properties for a user, mail

If you've verified the correctness of the e-mail address and display name, you can close the ADSI Edit program. Read the section 'MPM configuration' in this manual to learn how to add the Windows 2000 AD as a directory server in the MPM.

WARNING:

(11)

2.2 Exchange 2000

Exchange 2000 modifies your Active Directory (AD) structure to store e-mail addresses and other configuration data. If you've installed Exchange 2000 as part of your Domain, the e-mail addresses for your users can be generated automatically. These will then be stored in your AD. To retrieve this information, you must connect to any AD server in your domain (Domain Controller (DC) or Global Catalog (GC)). You do not connect to the Exchange 2000 server itself to retrieve stakeholder information for use with the Metatude Project Manager (MPM). Please read the previous chapter on how to locate the stakeholder information in your AD.

Mass-generating of e-mail addresses with Exchange 2000

This chapter describes how to automatically generate the e-mail address for your users when using Exchange 2000. If you already see the correct e-mail address for all users in the 'AD Users and Computers', you can skip this chapter.

To configure the e-mail addresses for your users, open the Exchange System Manager as shown in figure 6.

Figure 6. Exchange System Manager

(12)

Figure 7. Default Policy

Edit the 'SMTP' type to configure the e-mail address format for your users. For a simple e-mail addres format, you should enter the @ sign and everything that should come after it (your domain name on the inter/intranet). The login names of your users will then be prepended to this. For more information on customizing the e-mail address format, see:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q285136 Primary e-mail address

If you want to have multiple e-mail addresses for your users, click on the New... button. If you want to have different addresses for different users, you should add a policy next to the default policy. When adding or editing e-mail addresses, you can choose your primary e-mail address. This is the address that will be used in the MPM.

If you click on Apply, you will be asked if you want to update all the recipient addresses according to the changes you made. It is generally a good idea to do this. The primary e-mail address will then be assigned to the 'mail' attribute of a user in the AD storage. This attribute is used to retrieve the e-mail addresses for stakeholders in the MPM.

Editing the e-mail address of a single user

(13)

Figure 8. E-mail address for a user

Here you can edit the e-mail addresses on a per-user basis. Set the primary e-mail address to the e-mail address you want to use in the MPM. If you check the 'Automatically update e-mail

(14)

3 MPM configuration

3.1 Add directory server

Open your Metatude Project Manager and log in with a user that has Administrative rights. Click on the 'Dir servers' tab. Next, click on the 'Add server' button. Then, you can fill out the properties of your AD server, as shown in figure 9.

Figure 9. Add directory server

Fill out the fillowing properties:

Name: Enter any name you want Protocol: Choose LDAP

Host: Enter the Hostname or IP address of the AD server you want to connect to. This can be any

Domain Controller (DC) or Global Catalog (GC) in your Windows 2000 Domain.

Port: Choose the default LDAP port (389).

Base: Fill out the dn of the base you have found with the ADSI Edit program. In this example, it is CN=Users,DC=office,DC=metatude,DC=com

User: Fill out any user that has read rights to the AD. Please note that you have to fill out the dn of

the user. If you want to connect using the default administrator and the dn of the base for your users is CN=Users,DC=office,DC=metatude,DC=com, the user name is:

CN=Administrator,CN=Users,DC=office,DC=metatude,DC=com

Password: Fill out the valid Windows 2000 password for the user specified above.

(15)

14 MPM configuration

3.2 Attributes

After a while you will see the properties of the users in the AD. Check the properties displayName and mail. Give them the Types 'Name' and 'Email' respectively. You can check any additional properties you like. This is shown in figure 10. Click close to add the Windows AD as a Directory server.

(16)

Index

A

-active directory 5 adsi 5 attributes 14

B

-base 5, 13

C

-configuration 10

D

-databases 4 directories 4 directory server 13, 14

E

-e-mail 10 exchange 2000 10

H

-host 13

I

-installation 5 introduction 3

L

-LDAP 5, 13

M

-metatude 2

Metatude Channel Integration Component 4 Metatude Dialogue Designer 4

Metatude Dialogue Server 4 Metatude Project Manager 4

MPM 13

P

-policy 10

Windows 2000 Active Directory Configuration Guide