67 lines
4.4 KiB
HTML
67 lines
4.4 KiB
HTML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
||
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="dc.language" scheme="rfc1766" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<meta name="dc.date" scheme="iso8601" content="2005-09-13" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow"/>
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<title>User enrollment templates</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="ic.css" />
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
|
||
|
|
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
|
||
|
|
|
||
|
|
<a name="rzahqtmcco"></a>
|
||
|
|
<h3 id="rzahqtmcco">User enrollment templates</h3>
|
||
|
|
<p>A user enrollment template is a tool to help you enroll users from i5/OS™ to the Windows environment more efficiently. Rather than manually configure
|
||
|
|
many new users, each with identical settings, use a user enrollment template
|
||
|
|
to automatically configure them. Each template is a Windows user profile that
|
||
|
|
defines user privileges, such as group membership, directory paths, and organizational
|
||
|
|
unit containers.</p>
|
||
|
|
<p>When you enroll users and groups from i5/OS to the Windows environment, you can specify
|
||
|
|
a user template on which to base the new Windows users. For example, you could
|
||
|
|
create a user template and name it USRTEMP. USRTEMP could be a member of the
|
||
|
|
Windows server groups NTG1 and NTG2. On i5/OS you could have a group called MGMT. You
|
||
|
|
could decide to enroll the MGMT group and its members to Windows server. During
|
||
|
|
the enrollment process, you could specify USRTEMP as the user template. During
|
||
|
|
enrollment, you automatically add all members of the MGMT group to the NTG1
|
||
|
|
and NTG2 groups.</p>
|
||
|
|
<p>User templates save you from having to set up group memberships individually
|
||
|
|
for each user. They also keep the attributes of enrolled users consistent.</p>
|
||
|
|
<p>You can make a user template a member of any Windows group, whether you
|
||
|
|
enrolled that group from i5/OS or not. You can enroll users with a template that
|
||
|
|
is a member of a group that was not enrolled from i5/OS. If you do this, however, the users become
|
||
|
|
members of that nonenrolled group as well. i5/OS does not know about groups that were
|
||
|
|
not enrolled from i5/OS. This means that you can only remove users from the
|
||
|
|
group by using the User Manager program on Windows.</p>
|
||
|
|
<p>If you use a template to define a new user enrollment, and the template
|
||
|
|
has a folder or directory <span class="bold">Path</span> or <span class="bold">Connect To</span> defined, the newly-created Windows user will have the same
|
||
|
|
definitions. The folder definitions allow the user administrator to take advantage
|
||
|
|
of folder redirection and to manage terminal service sign-on.</p>
|
||
|
|
<p>If you use a template when you define a new user enrollment, and the template
|
||
|
|
is a user object in a Windows Active Directory organizational unit container,
|
||
|
|
the newly created Windows user object will be in the same organizational unit
|
||
|
|
container. An organizational unit provides a method to grant users administrative
|
||
|
|
control to resources.</p>
|
||
|
|
<p>You can change existing user templates. Such changes affect only users
|
||
|
|
that you enroll after you change the template.</p>
|
||
|
|
<p>You use templates only when you create a newly enrolled user in the Windows
|
||
|
|
environment. If you perform enrollment in order to synchronize an existing
|
||
|
|
Windows user with an i5/OS counterpart, Windows ignores the template.</p>
|
||
|
|
<p>For a detailed procedure see <a href="rzahqctmpi.htm#rzahqctmpi">Create user templates</a>.</p>
|
||
|
|
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
|
||
|
|
</body>
|
||
|
|
</html>
|