Windows 2000 Active Directory Configuration Guide 24-4-2003
1 Windows 2000 Active Directory Configuration Guide Table of Contents Chapter 1 Introduction 2 1 About Metatude 2 2 About this manual 3 3 The Metatude suite 4 Chapter 2 AD configuration 5 1 Windows 2000 server 5 2 Exchange 2000 10 Chapter 3 MPM configuration 13 1 Add directory server 13 2 Attributes 14
Introduction 2 1 Introduction 1.1 About Metatude The Metatude software suite allows you to collect feedback on the performance and activities of your company from stakeholders such as customers, business partners, co-managers and employees. This information is vital to your company because it allows you to fine-tune your business activities and company policies to the perception of your performance. And it is this information that will allow you to gauge and influence what others say and think about your company, something that can make or break you. Essential information that constitutes the basis for your business decisions. Metatude's web-based software allows you to collect feedback on issues such as: customer satisfaction and loyalty; employee commitment; corporate reputation; business ethics; service level management. Metatude is designed for large organizations whose IT infrastructure may be complex and have many stakeholders. Once the software is installed you can easily define target groups, create questionnaires, conduct research and manage output for analysis and reporting tools. For more information on Metatude software, technology and business examples, please consult our website: http://www.metatude.com
3 Windows 2000 Active Directory Configuration Guide 1.2 About this manual Windows 2000 server and Exchange 2000 use Active Directory (AD) to store user information. The AD can be accessed through the LDAP protocol. The Metatude Dialogue Server can use the LDAP protocol to retrieve stakeholder information from your Windows 2000 server and your Exchange 2000 server. It is usually not necessary to make any configuration changes to your Windows 2000 and Exchange 2000 setup in order to retrieve the stakeholder information. This manual guides you through the process of finding the right values in your AD storage for usage with the Metatude Project Manager. With the Metatude Project Manager you can add stakeholder directories that can be used in your stakeholder feedback projects. This manual describes how to add your Windows 2000 and/or your Exchange 2000 server as a stakeholder directory. You can find more information about stakeholder directories in the manual for the Metatude Project Manager. This manual is dated April 23 2003; Metatude will update this documentation if needed. Please check http://www.metatude.com/support/ for recent versions of this document.
Introduction 4 1.3 The Metatude suite The Metatude software suite consists of four interacting software components: 1. Metatude Dialogue Server; 2. Metatude Channel Integration Components; 3. Metatude Dialogue Designer; 4. Metatude Project Manager. The basis of the Metatude architecture is a central server (Metatude Dialogue Server) that needs to be installed in your organization. This server maintains the connections with databases, stores and serves the dialogues to stakeholders and collects and stores the collected data in a database. Once the Dialogue Server is installed, you can manage any stakeholder feedback with two desktop applications that are relevant for the regular user: the Metatude Dialogue Designer and the Metatude Project Manager. Consultants, managers and researchers can use these two applications to prepare questionnaires and manage projects involving stakeholder feedback. 1) Metatude Dialogue Server The Metatude Dialogue Server (MDS) is the central component within the Metatude architecture. This server connects to databases and directories with stored stakeholder information, communicates with electronic channels, stores and serves dialogues and writes results to a database. All the project information and intelligence to manage projects automatically resides on this server. 2) Metatude Channel Integration Components The Metatude Channel Integration Components (MCIC) need to be installed on an electronic channel. This allows the channel to communicate with the central server. 3) Metatude Dialogue Designer The Metatude Dialogue Designer (MDD) is a Windows application that is used to create questionnaires. With a simple and intuitive interface any user can learn how to create questionnaires in a matter of minutes. Many question types are supported, e.g. open questions, multiple choice, multiple response, scale and matrix questions. 4) Metatude Project Manager With the Metatude Project Manager (MPM) you can manage stakeholder feedback projects. The MPM can connect via a network to the Metatude Dialogue Server. Once logged on you can connect databases and directories, create target groups, assign dialogues to (multiple) target groups and retrieve results in the desired format.
5 Windows 2000 Active Directory Configuration Guide 2 AD configuration 2.1 Windows 2000 server Checking user information in your Windows 2000 Domain First, check the configuration of your users in your Windows 2000 Domain. Open the 'Active Directory Users and Computers' from your start menu. You can also use the MMC and add the snap-in with the same name. You should then see an overview of the available domain(s), as shown in figure 1. Figure 1. Active Directory users and Computers Locate the domain that you want to add as a new Directory server in the Metatude Project Manager (MPM), and expand it. Click on the users folder to see the users in your domain. Next, double-click on a user in the domain. This will bring up the properties for that user, as shown in figure 2.
AD configuration 6 Figure 2. User properties If you do not use Exchange 2000, you must fill out the e-mail address for each user here. Also, make sure the 'Display name' attribute is in the correct format for usage with the MPM. This will be used to address the user in the e-mail invitations (s)he will receive upon invitation for research projects that were created with the MPM. If you do use Exchange 2000, the e-mail address for the user is allready present. Please see the next chapter of this manual for an explanation of how the 'E-mail' attribute for each user is constructed by Exchange 2000. Locating user information in the Active Directory Storage If you are satisfied with the configuration of your users, the next step is to locate them in the Active Directory (AD) storage. This can be done by using any LDAP client, or AD client. The easiest way to locate your users is by installing 'ADSI Edit'. This tool is located on your Windows 2000 server CD-ROM, in the directory /SUPPORT/TOOLS/. Simply run SETUP.EXE, and follow the on screen instructions. ADSI Edit will then be installed. Please install ADSI Edit on a computer that is logged into the Windows 2000 Domain. Next, start the ADSI editor from the start menu. If you are logged into the Windows 2000 Domain, you will be presented with a screen similar to figure 3.
7 Windows 2000 Active Directory Configuration Guide Figure 3. ADSI Edit Expand the node called 'Domain NC'. You will then see the appropriate LDAP name of your Domain. In the above figure it is called DC=office,DC=metatude,DC=com Any LDAP name for an object in the AD (or other LDAP storage) is called a Distinguished Name (short: dn). In the right pane you see several objects that are part of your domain. Expand the Domain folder further, and click on the 'Users' folder, as shown in figure 4. Figure 3. Users in the AD In the right pane, you will see all the users and groups in your domain. Notice that these are the
AD configuration 8 same users and groups that are in the 'Active Directory Users and Computers' also. In the above example, the dn for the location of the users is CN=Users,DC=office,DC=metatude,DC=com ; it is the dn of the Domain with CN=Users, prepended to it. To construct the dn for the location of your users, use the LDAP name of your Domain, and prepend the names you see in the tree when browsing to your users. Just prepend each folder name as you progress deeper in the tree. Usually, the dn is just CN=Users,dn of your Domain but feel free to explore the AD tree if you cannot find your users directly. If you've found the location of your users in your AD, please write it down. You can use this name in the MPM when adding a new directory server. This dn is called the 'base'. Verifying the user information in the Active Directory Storage If you want to, you can verify if you have found the correct information of your users. To verify the correct username and e-mail address, right click on any user, and choose properties. You will be presented with a screen as shown in figure 4. Figure 4. Properties for a user, DisplayName In figure 4, the property 'DisplayName' is shown. This is the 'Display Name' that was filled our in the 'AD Users and Computers' configuration. In figure 5, the E-mail address for a user is shown. This is the 'mail' property.
9 Windows 2000 Active Directory Configuration Guide Figure 5. Properties for a user, mail If you've verified the correctness of the e-mail address and display name, you can close the ADSI Edit program. Read the section 'MPM configuration' in this manual to learn how to add the Windows 2000 AD as a directory server in the MPM. WARNING: Never make changes directly with the ADSI Edit program. You can destroy the AD for your domain, which will cause your entire domain to stop functioning. Use the tools that came with Windows 2000 server instead, such as the AD Users and Computers.
AD configuration 10 2.2 Exchange 2000 Exchange 2000 modifies your Active Directory (AD) structure to store e-mail addresses and other configuration data. If you've installed Exchange 2000 as part of your Domain, the e-mail addresses for your users can be generated automatically. These will then be stored in your AD. To retrieve this information, you must connect to any AD server in your domain (Domain Controller (DC) or Global Catalog (GC)). You do not connect to the Exchange 2000 server itself to retrieve stakeholder information for use with the Metatude Project Manager (MPM). Please read the previous chapter on how to locate the stakeholder information in your AD. Mass-generating of e-mail addresses with Exchange 2000 This chapter describes how to automatically generate the e-mail address for your users when using Exchange 2000. If you already see the correct e-mail address for all users in the 'AD Users and Computers', you can skip this chapter. To configure the e-mail addresses for your users, open the Exchange System Manager as shown in figure 6. Figure 6. Exchange System Manager Open the 'Recipients', and then the 'Recipient Policies'. You will see the 'Default Policy', if you didn't add any other policies yourself. Open the Default Policy by double-clicking on it. Next, click on the 'e-mail addresses' tab. This is shown in figure 7.
11 Windows 2000 Active Directory Configuration Guide Figure 7. Default Policy Edit the 'SMTP' type to configure the e-mail address format for your users. For a simple e-mail addres format, you should enter the @ sign and everything that should come after it (your domain name on the inter/intranet). The login names of your users will then be prepended to this. For more information on customizing the e-mail address format, see: http://support.microsoft.com/default.aspx?scid=kb;en-us;q285136 Primary e-mail address If you want to have multiple e-mail addresses for your users, click on the New... button. If you want to have different addresses for different users, you should add a policy next to the default policy. When adding or editing e-mail addresses, you can choose your primary e-mail address. This is the address that will be used in the MPM. If you click on Apply, you will be asked if you want to update all the recipient addresses according to the changes you made. It is generally a good idea to do this. The primary e-mail address will then be assigned to the 'mail' attribute of a user in the AD storage. This attribute is used to retrieve the e-mail addresses for stakeholders in the MPM. Editing the e-mail address of a single user To change the (default) e-mail address for any particular user, open the 'AD Users and Computers' and edit the user. If you've installed Exchange server you will see the following tab, as shown in figure 8.
AD configuration 12 Figure 8. E-mail address for a user Here you can edit the e-mail addresses on a per-user basis. Set the primary e-mail address to the e-mail address you want to use in the MPM. If you check the 'Automatically update e-mail addresses' checkbox, these e-mail addresses (and the primary address) will automatically be updated according to the policy you have entered in the Exchange System Manager. If you uncheck the box, you can edit the e-mail addresses manually.
13 Windows 2000 Active Directory Configuration Guide 3 MPM configuration 3.1 Add directory server Open your Metatude Project Manager and log in with a user that has Administrative rights. Click on the 'Dir servers' tab. Next, click on the 'Add server' button. Then, you can fill out the properties of your AD server, as shown in figure 9. Figure 9. Add directory server Fill out the fillowing properties: Name: Enter any name you want Protocol: Choose LDAP Host: Enter the Hostname or IP address of the AD server you want to connect to. This can be any Domain Controller (DC) or Global Catalog (GC) in your Windows 2000 Domain. Port: Choose the default LDAP port (389). Base: Fill out the dn of the base you have found with the ADSI Edit program. In this example, it is CN=Users,DC=office,DC=metatude,DC=com User: Fill out any user that has read rights to the AD. Please note that you have to fill out the dn of the user. If you want to connect using the default administrator and the dn of the base for your users is CN=Users,DC=office,DC=metatude,DC=com, the user name is: CN=Administrator,CN=Users,DC=office,DC=metatude,DC=com Password: Fill out the valid Windows 2000 password for the user specified above. Then, click on the 'Next' button to view the attributes.
MPM configuration 14 3.2 Attributes After a while you will see the properties of the users in the AD. Check the properties displayname and mail. Give them the Types 'Name' and 'Email' respectively. You can check any additional properties you like. This is shown in figure 10. Click close to add the Windows AD as a Directory server. Figure 10. Directory server Attributes
15 Index Windows 2000 Active Directory Configuration Guide MPM 13 - A - active directory 5 adsi 5 attributes 14 - B - base 5, 13 - C - configuration 10 - D - databases 4 directories 4 directory server 13, 14 - P - policy 10 primary e-mail address 10 project 13 - R - recipient 10 - S - stakeholders 4 - U - users 5 - W - windows 2000 5 - E - e-mail 10 exchange 2000 10 - H - host 13 - I - installation 5 introduction 3 - L - LDAP 5, 13 - M - metatude 2 Metatude Channel Integration Component 4 Metatude Dialogue Designer 4 Metatude Dialogue Server 4 Metatude Project Manager 4