Share via

Configuration

  • Article

Applies To: Windows Server 2008

If there is a change to the configuration of an Active Directory Lightweight Directory Services (AD LDS) instance, the change must be registered with the instance's internal database as well as with the databases of any replication partners that are configured. Such updates are especially important when replication partners exist, because a local instance cannot receive any updates from its replication partners until the change is registered by the replication partners in their respective databases. The configuration changes that must be recorded and replicated include the following:

  • Host name modification of the server that hosts the AD LDS instance
  • Changes to the network communication port on which AD LDS services are offered
  • Changes to the service account that AD LDS is using

Note: AD LDS provides services by using the security credentials of a user account. A user account that a service uses is commonly known as a service account.

Aspects

The following is a list of all aspects that are part of this managed entity:

Name Description

Auditing

Active Directory Lightweight Directory Services (AD LDS) relies on the AuthZ Resource Manager to generate audit events.

Port and Host Name Configuration

If there is a change to the host name or network communication ports of an Active Directory Lightweight Directory Services (AD LDS) instance, the change must be registered with the instance's internal database as well as with the databases of any replication partners that are configured. Such updates are especially important when replication partners exist, because a local instance cannot receive any updates from its replication partners until the change is registered by the replication partners in their respective AD LDS databases.

Service Account Configuration

Active Directory Lightweight Directory Services (AD LDS) provides services by using the security credentials of a user account. A user account that is used by a service is commonly known as a service account. If the service account that AD LDS uses is changed, the AD LDS instance that uses that account detects the change and warns the administrator that additional configuration steps may be required. The change must be registered with the instance's internal database as well as with the databases of any replication partners that are configured. Such updates are especially important when replication partners exist, because the local instance cannot receive any updates from its replication partners until the change is registered by the replication partners in their respective AD LDS databases.

Service Account Updates

Active Directory Lightweight Directory Services (AD LDS) provides services using the security credentials of a user account. A user account that a service uses is commonly known as a service account. If the service account that AD LDS uses is changed, the AD LDS instance using that account detects the change and warns the administrator that additional configuration steps may be required.

Active Directory