Re: Must ADAM be installed on every machine?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 12/11/04


Date: Fri, 10 Dec 2004 22:19:23 -0600

I'm actually not much of an AzMan expert either as I've never built anything
in production with it.

You probably want to get some more details from someone deeper in this. You
might try asking in one of the .NET security news groups to see if you can
catch Dominick Bauer's attention.

It wasn't clear to me if you were using ADAM for the policy store or the
auth store or both. Can you clarify that part?

It does seem to me like something is very wrong if you need an ADAM instance
on each machine you are deploying to. That is definitely not the intended
way. Is there a reason why you can't connect to an ADAM instance on the
network?

Joe K.

"Lee Flight" <lef@le.ac.uk-nospam> wrote in message
news:ubzwXjv3EHA.4092@TK2MSFTNGP14.phx.gbl...
>I do not have any AzMan stuff in production so I cannot offer
> strong advice. I do think it's an interesting piece of technology
> and I do think usage is starting to pick up, just recently we have
> started to see training and conference sessions on this for the
> first time. I assume you have looked at Dave McPherson's paper:
>
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/athmanwp.mspx
>
> I was mainly answering your ADAM placement question for better
> advice on the applications side you would be better off trying to
> catch the attention of Joe Kaplan.
>
> Lee Flight
>
> "Nate" <Nate@discussions.microsoft.com> wrote in message
> news:13756D0B-281C-4FDF-9C1D-A233FACF11C0@microsoft.com...
>> Thanks for the response.
>>
>> You're right. We're looking at straight-forward UI tier authorization
>> for a
>> WinForms/SQL Server project. If using ADAM is going to be too
>> involved, - if
>> an undue amount of code is involved, or if other software is required - I
>> think we'll go with something else. I've also been cooling down on the
>> Authorization Manager idea. I didn't realize we'd have to write our own
>> wrapper for it and the samples out there are concerned with its features
>> and
>> easy to use UI. There's nothing out there - zero - on actually using the
>> Authorizations in WinForms development.
>>
>> Without Authorization Manager we'd have to write a UI for the thing and
>> also write code to access ADAM information. If it comes to that I think
>> we'll write a SQL Server app - we have a lot of SQL experience here, or
>> continue with Active Directory.
>>
>> What are your thoughts?
>
>



Relevant Pages

  • Re: ADAM Proxy Authentication and Movetree
    ... as to why this is happening in production. ... additional SID in sidHistory for old NT4 account access, ... are scheduled to be removed 90 days after the migration. ... As far as the GC is concerned...I checked that querying a GC from the ADAM ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authorization Manager and ADAM
    ... Oh, btw, don't forget to import ms-azman.ldf when you install the instance. ... ADAM ADSI Edit shows everything to be correct. ... Then right click Authorization Manager, New Store, ... >>> thus far to create an Authorization Store within ADAM. ...
    (microsoft.public.windows.server.general)
  • Re: Authorization Manager and ADAM
    ... Oh, btw, don't forget to import ms-azman.ldf when you install the instance. ... ADAM ADSI Edit shows everything to be correct. ... Then right click Authorization Manager, New Store, ... >>> thus far to create an Authorization Store within ADAM. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authorization Manager and ADAM
    ... Oh, btw, don't forget to import ms-azman.ldf when you install the instance. ... ADAM ADSI Edit shows everything to be correct. ... Then right click Authorization Manager, New Store, ... >>> thus far to create an Authorization Store within ADAM. ...
    (microsoft.public.windows.server.security)
  • Re: ADAM woes
    ... but you guys don't seem to be very close to being Microsoft specialists to be coming up with Microsoft solutions regardless of how big you are. ... Unless you are messing with Exchange and using CDOEXM most apps should be able to utilize AD from a workgroup machine if you actually have a strong understanding of how authentication works. ... Now certainly even if you knew how to work against your production AD, that isn't something that you want to do with dev work is it? ... I know for a fact I could grab most of the info from our corporate directory and put it on my laptop on an ADAM instance but I also know that I could rightfully be fired for doing so because my laptop is not a safe location for that information. ...
    (microsoft.public.windows.server.active_directory)