| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Windows/Help/Windows/en-US/ |
Upload File : |
MZ @ PE L ! @ 0 ]
@ .rsrc @ @.its @ @ 0 H X | |4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 b ! F i l e V e r s i o n 1 . 0 0 . 0 0 l " F i l e D e s c r i p t i o n C o m p i l e d M i c r o s o f t H e l p 2 . 0 T i t l e B F i l e S t a m p 7 0 4 E 2 C 4 8 0 1 C A 0 4 1 F 4 J C o m p i l e r V e r s i o n 2 . 5 . 7 1 2 1 0 . 0 8 5 7 9 V C o m p i l e D a t e 2 0 0 9 - 0 7 - 1 4 T 0 1 : 0 7 : 2 0 > T o p i c C o u n t 1 2 1 0 0 0 0 0 0 0 0 0 0 0 0 A L e g a l C o p y r i g h t 2 0 0 5 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . C C C C C C C C C C C C C D V a r F i l e I n f o $ T r a n s l a t i o n ti y H,Np ÕITOLITLS ( X쌡^
V` x i CAOL P HH C ITSF # Pp R -Y쌡^
VY쌡^
VIFCM AOLL i IFCM AOLLc
/ /$FXFtiAttribute/ /$FXFtiAttribute/BTREE5/$FXFtiAttribute/DATA /$FXFtiAttribute/PROPERTYMN /$FXFtiMain/ /$FXFtiMain/BTREE /$FXFtiMain/DATA#D/$FXFtiMain/PROPERTYgN/$Index/$ATTRNAMEk/$Index/$PROPBAG/$Index/$STRINGS/h/$Index/$SYSTEM}
/$Index/$TOC/ /$Index/$TOC/$adam_LH /$Index/$TOPICATTRP/$Index/$TOPICS] /$Index/$URLSTR~/$Index/$URLTBLH/$Index/$VTAIDX /$Index/AssetId/ /$Index/AssetId/$BL0# /$Index/AssetId/$LEAF_COUNTS# /$Index/AssetId/$LEAVES/ /$OBJINST /adam_lh.h1c q /adam_LH.H1F \ /adam_LH.H1T H /adam_LH.H1V h`/adam_LH_AssetId.H1K Wk/adam_LH_BestBet.H1K Bk/adam_LH_LinkTerm.H1K -l/adam_LH_SubjectTerm.H1K o/assets/ 0/assets/042987f0-b2ba-4d5a-aa65-0e0b1a92362d.xml tc0/assets/0e83fa42-96c9-4558-827d-493c5c8301a7.xml 0/assets/10d042cc-430f-4e9f-bc09-b3361ff1ad1a.xml *`0/assets/13afca07-9bcb-47fa-b686-22bbfdcfa7fb.xml
0/assets/15df831c-0026-44e6-9838-eca31fc0cd12.xml o40/assets/180087b1-342c-4ec4-9d3d-b806f2ab7290.xml #\0/assets/1d2ea13e-3698-459a-af3b-be41255715aa.xml 0/assets/1eb8c26e-2bdf-49cf-94b4-4284c6770892.xml L0/assets/2566f6bd-172e-451d-b4c2-61a8dd30fd3e.xml c 0/assets/26f03d1e-5a57-4cc9-a39e-2c082cd9597d.xml on0/assets/2c20af4a-76c5-4b86-bdc9-a12ca9492085.xml ]P0/assets/3878750b-49cb-4d30-b8c2-6947a3c2ac0f.xml -0/assets/3d1bcd6a-3e51-4be2-a911-a3e83d1b2496.xml 5B0/assets/40da08a3-0861-4666-bdae-1f49ff143414.xml wY0/assets/4121bfc9-6c68-4657-8d8d-90cb4c664c4c.xml P\0/assets/45ba077e-e529-4740-894e-26d8322a57a4.xml ,j0/assets/46d1d997-1dff-451f-8c02-d82ade1ae81c.xml "0/assets/4aed37e2-52c6-4b35-9db3-6bf8a4ba6051.xml 80/assets/4fd8db90-43e2-4b3b-85f8-af92aab5249c.xml I:0/assets/517e9e1c-7060-4ad5-a542-f2915d15ebb1.xml H0/assets/58cf1c37-5f84-4459-8830-53d73c236924.xml 0/assets/5f662b35-c775-4b92-bc46-fd1ce4f33206.xml ,O0/assets/6caaf52f-4400-44e3-91e9-2d40b224b139.xml {90/assets/7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3.xml 4x0/assets/79f98741-9126-4cbc-be61-c26a4cb66ef3.xml ,G0/assets/7c663266-87be-4e4a-bbeb-889da5eafbd4.xml sh0/assets/82f0d560-3e2c-441e-a3b3-ca3fa5b87380.xml [0/assets/8a4c65da-20da-45a1-b3ed-de6f5a9c4412.xml ];0/assets/8a4ced66-9ef7-49d5-99fb-93a8d69ae50f.xml 0/assets/8b3ee0f1-73d2-4066-99d9-529de6460244.xml (30/assets/8cccc00d-b452-4109-a1a5-60e1af3af95e.xml [:0/assets/95fd3ac1-6fa7-4640-bca9-8651fb968e29.xml f0/assets/999967cd-9f18-44c5-8d80-347343cac9d1.xml {s0/assets/9bbcb7e7-8db2-405f-a9d8-93022e535747.xml n 0/assets/9c257be0-d40b-4c59-8c67-6215f38c7edb.xml wz0/assets/a2976306-c63a-4131-8ce0-a3d295b5872c.xml q0/assets/a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be.xml
T0/assets/a80a7df3-9afa-4600-be7e-f51503c8b7be.xml ^20/assets/ab5c668e-f30d-4e72-a0be-56066522d9e5.xml 40/assets/abd379d1-9604-4558-9a3b-2871044d227f.xml D\0/assets/af887b8c-6594-476d-ae39-992580552c15.xml .0/assets/b10f1377-722f-4a4f-9fb8-900f28695562.xml N0/assets/b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd.xml i{0/assets/b8f537a7-443f-40c7-b176-bddb5c73d436.xml dN0/assets/c357a345-0375-4e7c-9a78-12a1db4f61d5.xml 2r0/assets/c77f5e81-212e-47ab-b4ea-f5ac82f2b026.xml $l0/assets/cf574719-68d1-4aea-87de-e568fdd0b6a6.xml v0/assets/d2b337b3-47e7-458c-b5a4-9e3d14a08078.xml ul0/assets/d3060406-b3d4-44a0-a63f-180164f4f387.xml a0/assets/d4ee7dd8-1806-4876-9855-9174c4354dd8.xml |Y0/assets/e153d38c-6dfb-4ae4-8b39-d22fd4f79e79.xml UP0/assets/e3d6fde7-470e-49dd-8477-37190bed38df.xml %0/assets/e4ab883e-436e-4a98-8456-af15e66550d1.xml -60/assets/e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6.xml c80/assets/ed463518-ce97-4eb5-89b9-ec4d958edb53.xml Q0/assets/f43b2a3a-18ec-4f24-84d6-90df5a93c750.xml lj0/assets/fb629986-509c-4dcd-9e90-a04ab038b94d.xml V0/assets/fd35c067-aeb1-45d3-b3be-8185a6b754c6.xml p/relatedAssets/ 7/relatedAssets/2ef24662-abcf-4d3a-b2fb-8fb71fe9494e.gif KA7/relatedAssets/92183d99-a1a3-4949-b33d-1ea4a6e683ed.gif W<7/relatedAssets/ab5b4bf9-29b7-4071-8340-f67408846212.gif o7/relatedAssets/f0d05323-4cee-406a-9d1a-ad5083970d0f.gif \::DataSpace/NameList <(::DataSpace/Storage/MSCompressed/Content
,::DataSpace/Storage/MSCompressed/ControlData T )::DataSpace/Storage/MSCompressed/SpanInfo L/::DataSpace/Storage/MSCompressed/Transform/List <_::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ i::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ResetTable h3::Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/
wdQ>CS q i U n c o m p r e s s e d M S C o m p r e s s e d FX쌡^
V LZXC HH <maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Synchronize with Active Directory Domain Services</maml:title><maml:introduction>
<maml:para>Synchronizing data from an Active Directory Domain Services (AD DS) forest to the configuration set of an Active Directory Lightweight Directory Services (AD LDS) instance requires two steps:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Prepare the AD LDS instance for synchronization.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Synchronize the data.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Typically, you perform the first step only once. You perform the second step whenever you want to update the AD LDS instance.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Preparing an AD LDS instance for synchronization</maml:title><maml:introduction>
<maml:procedure><maml:title>To prepare an AD LDS instance for synchronization</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>cd %windir%\adam</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To prepare to synchronize an AD LDS instance with a Windows Server 2003 forest, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>ldifde -i -u -f ms-adamschemaw2k3.ldf</maml:computerOutputInline> <maml:computerOutputInline>-s</maml:computerOutputInline> <maml:replaceable>server</maml:replaceable><maml:phrase>:</maml:phrase><maml:replaceable>port</maml:replaceable> <maml:computerOutputInline>-b</maml:computerOutputInline> <maml:replaceable>user_name</maml:replaceable> <maml:replaceable>domain</maml:replaceable><maml:phrase> </maml:phrase><maml:replaceable>password</maml:replaceable> <maml:computerOutputInline>-j</maml:computerOutputInline> <maml:computerOutputInline>.</maml:computerOutputInline> <maml:computerOutputInline>-c "cn=Configuration,dc=X" #configurationNamingContext</maml:computerOutputInline></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To prepare to synchronize an AD LDS instance with a Windows Server 2008 R2 forest, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>ldifde -i -u -f ms-adamschemaw2k8.ldf -s</maml:computerOutputInline> <maml:replaceable>server</maml:replaceable><maml:phrase>:</maml:phrase><maml:replaceable>port</maml:replaceable> <maml:computerOutputInline>-b</maml:computerOutputInline> <maml:replaceable>user_name</maml:replaceable> <maml:replaceable>domain</maml:replaceable> <maml:replaceable>password</maml:replaceable> <maml:computerOutputInline>-j . -c "cn=Configuration,dc=X" #configurationNamingContext</maml:computerOutputInline></maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>You must include the period (.) between <maml:computerOutputInline>-j</maml:computerOutputInline> and <maml:computerOutputInline>-c</maml:computerOutputInline>.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>ldifde -i -s</maml:computerOutputInline> <maml:replaceable>server</maml:replaceable><maml:phrase>:</maml:phrase><maml:replaceable>port</maml:replaceable> <maml:computerOutputInline>-c CN=Configuration,DC=X #ConfigurationNamingContext -f MS-AdamSyncMetadata.ldf</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>notepad MS-AdamSyncConf.xml</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In Notepad, make the following changes to the contents of the configuration file:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Replace the value of <source-ad-name> with the name of the source AD DS domain controller.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Replace the value of <source-ad-partition> with the distinguished name of the source domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Replace the value of <source-ad-account> with the name of an account in the Domain Admins group of the source domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Replace the value of <account-domain> with the fully qualified Domain Name System (DNS) name of the source domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Replace the value of <target-dn> with the name of the partition of the target AD LDS instance.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Replace the value of <base-dn> with the base distinguished name of the source domain.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In Notepad, on the <maml:ui>File</maml:ui> menu, click <maml:ui>Save As</maml:ui>, type a new name for the file, click <maml:ui>Save</maml:ui>, and then close Notepad.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the command prompt, type the following command, substituting the file name that was used in the previous step for <maml:replaceable>xml_file</maml:replaceable>, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>adamsync /install</maml:computerOutputInline> <maml:replaceable>server</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>port .xml_file</maml:replaceable></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:para>After you prepare the AD LDS instance for synchronization, you can perform the following procedure as needed to synchronize data from the specified AD DS forest to the AD LDS instance.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Synchronizing AD DS forest data to an AD LDS instance</maml:title><maml:introduction>
<maml:procedure><maml:title>To synchronize AD DS forest data to an AD LDS instance</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At a command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>adamsync /sync server:port configuration_dn /log</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The following table contains the parameters for the preceding procedures and other commonly used <maml:computerOutputInline>adamsync</maml:computerOutputInline> parameters. For more information about <maml:computerOutputInline>adamsync</maml:computerOutputInline> parameters, at a command prompt, type <maml:computerOutputInline>adamsync /?</maml:computerOutputInline>, and then press ENTER. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/?</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays command-line options.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/i</maml:computerOutputInline> or <maml:computerOutputInline>/install</maml:computerOutputInline> <maml:replaceable>input_file</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Installs the configuration that is contained in the specified input file.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/sync</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Synchronizes the specified configuration.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/fs</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs a full replication synchronization for the specified configuration.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/ageall</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs an aging search for the specified configuration. An aging search determines—by searching for the AD LDS objects in AD DS—if the AD LDS objects in a configuration have been deleted in AD DS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/so</maml:computerOutputInline> <maml:replaceable>configuration_dn object_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs a replication synchronization for the specified object in the specified configuration. Use the distinguished name of the object.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:listItem>
<maml:listItem>
<maml:para>You must have Read or Dirsync access to the objects or partitions in the AD DS forest that you want to synchronize.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You must have full control of an application directory partition on an AD LDS instance to run this command.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Adamsync</maml:linkText><maml:uri href="mshelp://windows/?id=40da08a3-0861-4666-bdae-1f49ff143414"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89ap , ,,0 04 888<< < < <y @@@@ DDDH@@@DDHHH HP L L PY P(P(P U Y,U e$Ye0Y(] m e,] am0]YY]4] q,a8]0a8a u8a m y m<e@e4i@i u Diu Hm yHqLq @u0}PqHu qqqUu,} Uy YyY},Y}L]}}}Paa<ae@i]4}Y m]mq(eHu0P4iy}]恙@m♙΅q慡҉uPҁ⍪Ym}aڝڑ慺qމʙ楺yޅΥ H*\ȰÇ JHŋ3jǏ C IIƝ\ɲ˗ I͛8+
ϟ+e Jч;*]ЦPJ-tի'bʵ+^Ê8sٳE=
ZZ܅jkW[?,0A1Ex_% yG|aeKV~9氃 ŗ/Bn]۵m[ĸIK{1p
յ-'# =fN0߹^:{/g:~[|Qwzk<'[g*H`y o t%T~J߄Q{ (yٖbr#`h8 s,H %&5XPF) 턈ӈ@`ș gј9Z eHdn~#Z¨! $*|矀7楖&
dvI_xَ"mJ^%u
!=
Y0(6!_~*)YǐtX2j8 ,]UB>xh1vbUCi;BM"ϮPRͫ/"įA_
\PưAWDDw]\P J}lZXp+<P,30߬3E6le>B{ tH{Lt8.
NOm?=_-Zu
dmh9 i 6Ahx|y@)4)';) G.Q;̵f,Wwu^4V^0z_e 3w 4SN0s3P/r3O /o3L+/k93IKO/hY/3Hk.gy 3E.f2B XyX տgO ]MV@d dX`=P J:pz GHz0 0
Wtd, ?868a1 P؈2~HD EL 8PH*ZXbp-zZL 0h6'hXEA#0# >ю &\ABL"F:$!1|C̤&7Nz e!L*WHRr,UIIKbr̥.w)KWf䔼 0Kr f-/rd:de1/hZ3<5eZ 89MTstd6av&қ;IU"<
@JЂMBC"t(ЊZ( b yǪJW҄6$XE VMCQLP@@
j9SWt"')j
RDTS[ڔP=ݩ"zT$iTZȇN$X-YUbK
[UMJ5DTuZ V+EC:UwuP^ꐿnUZO[MJC&v?yͤXZ E Ȟ!AhW d@ͭnw|m`j24hr?+dVdbOI&V-kd[G3 xKMz^ %)qi\B&6M~ L`^װOe'g]:8@`F~-7 dY_W7 NW7cq FX1$/,a@rA Qפ%>dxѵnAEXx]`2E<\ RaNٹR9U0ye6ds1<a5cȈߚψ.0f9KYƟl+ JJx=(}JI[ӛ13` aFAS9M&Ëd<eGO.t*-'c96t"JR1[Ȭvuqlh\Crא3"MEv0i3}Lsݐ'=&7S $v߀@6w+^ 25NO3츥Bfs<g6=Nr!tsNߞO]RGoщNtU'CwpB+| V:^EGҹ7|^IbC m>8Nw sޗmss;?=@/.Sk/5 tb~GSvɧGW턷 ݛ|u7<7/}}xo~ l2za? z#w;[~:/74]x ~wzlѦi 7(wvpק~~~ڧzZG ȁSgpVuvuu ( 8en7xG7rV}FH@mJ(m~W gF_*,8~4H2gmif{vrWs{}~x>giOȧH2qT؈<7rw{(H}VP?uhum~ȉuLv^yd6zXpgQPGvo}֊._8H:H<KKHxc HaΆL]ւɈGHfhHHK'LMK(L\&8EGT_טHhegtV|IHHj8hTU(9HLmwikhb@PI ))P` 7p Ĩg M "I6y+ % 0-g
yHvo
L=%ɑ79MynK+-1Y4 d 9Ki?ik^ْCzxthHXJ2Ww%Wr6o[rX'+nR'h}p&֖XHwiYy
F}HW{w?|yy~m^ɘzyvG-fluhfȈgi}G&svǝ"<oo8v~f8y٘y"Y} ꜿ9e`Iyء9|IoZ="|{ y뷉t5ʌVWiHÉ6Hj7*x閏}nSIlyw%&A ٜz:J٣Rv5xzh:IErJj )JoFDŽi؈\HzH`#8\hʜX
džfڜzJgN*:|Xʨ!
9 *ɤ:Ɖ
hnIGjoz0^(٬κʧzY JsW
䉨wg$)xqV5*P牞XbtU
:۟hIHɫH9X 9$kkzڗh2{~fibʩfǩIʱy汻V9g# iƳڮi&}z*H;6{WTdPU۲K,7۴fdcRsdVE˶ ˏ~^bekKFYn{|p+r˸+V{=)~ˋ; 빫J a*\Q 5 kQJ{țʻۼЋzИڋPۅ` %olrC$T{CP={Y䱴ȷZX;Y{edgY;Wk-G f}+Lh꿵0 x u0 Yr[@ B<ĺu>KEL 3̪.H;`KHڏmÆ5d\f|^wU({2@bZ kW4 i^P̿Ƅbqt n7U|Ů[ ],_ ȑ5ȋ<`ܦȟa i+ŇzǔlZ [|`~a욦su0y,ǯ9 <g ̸xĮK<`¼~Jx̍,A˚ o9@Ɯ `&ω)l+,\d4[μv9YK,Ȱ[`q
AI) 6Ѫ:
}Z| \% M=`Jnivh ,ȬIpXjd IEL*Y[ `'H=
`ݾGp| <DB:#l-ҊH׳Z Э1-֪a(Y6=ʉe؝-
X;=ع}M؉,*
ڼ8˦Ո}ٙGؽ| n۸}ۘ_͡+Ғ,ׅwIIP~m ݵk磖ȾAe:Zu|ݝP탁jݙ4|\ rͬ*@z\
a': Ե|} s(
,?b Hl6H .5^^QSLɼ\<,|Ln>f䫌K~ɽ]a/ X.UW~g8^{A`xnuS9
z t(cel}} 6p^~N =@=*7 L,PP3v(길e .Xlܪ)4rPN ƎH 6H EC nA"p,y+o-:H
DM..-SZS[;M2^][
qϷћ 잃΄
= oY[οǚ"^tvi~l MDs ,"I=4a
GgNAI'O2M
8 jv`0o* w;\ZS(Y"ObNsưXvZ:~<A'3u~ ^.G힅NЁKjJY/-G՝P>__Dع ~M|LN?>͏9 7X}bE.nBJ @
$8B
|QāDL2~7
=~ԀbÄ %<X0&Ç'xr+#K*2C,E0zT)RE2tiӤQ֞INEX^PQP"u UVt嶽V.fܸS0Ű(UFC+k)&N R"1;1dMc
dƔw~lre6_Gyi&Pm#=
79Fm9y*|ZY *-tʝb;<zW+:1[ c0͕Ҵ;,@ p ~
N(0C
7ä&K,M70EW0> ԏoq^Tm)4P8̱H#
!E'|Db;(rC QD!#qG0{$M92O=;1J Oܳ.(L\9 OD5%$RMsI<
u>TP$B1TU[ pRc27u0I \7AV_;Up?+,S%٭-@X3oV_U\R^VS`-t|
@2#-5ZEY?kíVEu;/\cHYB .We#T_J+_Eb& fV]fC^W? fgfo9gwyz}%hFf:3 * jj:k D8Yv銤F;mǕ53lFv[~3;o :#jp<p'pG<qkR-yo'? or[]7nC' c o3Wr.uG gstI {އw5@&M;ow~PRYwe {_-5S'={6$\ ~?_ 8 Ђf>(l%A
BЂ`1A
v0 Z7z#Ԝ?y( `(І5!
ux 搇?a{'hMc2 M|8E)V1W"E.nыZbB-NAİ^ CٰT$5cqո3{òzG?#`#sG.9,룺xIkL$
e#͑D'?Xy$6J~ r0n4d(W9GS.$0Z-Kc1fKr>\\R '- $*iz,dGΏ 9!E U z<UM(de*Axr|Z)Π|C iа1s'L̲PȳPg69yNTdhB= 2rJ h.iO] beOiJl"H{b:4:qO黂ԧ5BZȻiEɊsU
ٓ} Y idՊ^J
HFͩIJUkh2~&tթ%C 2șyk˕~Ml.?
uƦ5l7:bC;]^mjȵuWsZjiZ6di \za ZlVh{֭}Ys{JծwZ[}]:n+m}2ݑ^ER*t [NɶV.Sg
1
] `3 mz,Jra
n; w4<0ƂxUVo]|g8 ƽ K FZ'ke']s [n1T9f!Psd /7%W)]'R ~ B )@t
JpB7яn
hE3 ^,%v I13S)6%@E[ͧ'Kg jZrVM"ٶ%Ny؎uX
4*L(9-V_J\(B67$V OP| I:}m&gO2CS;8+fp[6Zmn6=i8' Vbu{-ݱXoMuM~Uxr)⬞L
Olm^l\]imѷ05sz;@8j >G;dUs",Sn٫gºs =d 63NX>xL7r~َ2p^jNtmuq#s#Z8ݍK來o ^?zbwl5S/۳hmSJyh&yly1W>8yy{ >};Sz~гOn_iAy
qR ;=h1 +? 3m>+ 9k?쾇c08
=;[@
s=j0 8AX ` A !B""D#TB#4 `@-B++,B,-.12 0d>s2@zeC::;C;<=@AB0#@HJ\ElDFtHI|JDKKLDLDAD735{9LlŮ >k@UTPlW%E63Z?Z @]5s`<E+\L@eE[|ơ#Aj (WGr rDsTGsdtlutxy|wD \cF|Q ً.c?2(NDO<Ȅ4ȅDH\DNh?i- d.$q. 8 fde>q@F9P 2GtEmƷAa2Ct;,I~+RtFFHI?LJEE$FƖ|B 6)˰Iܭj<k<JFF 0˽ԛətKǷ\˝4J*9˼ܛˢt@0c˛$Pc_tL̈ (M<ͲD0ͳlMD̪ ̋JdEFd)t$MTM44NDNK IܬAT4
T|NLL<
ʔN̬͚^L Ͱϱ,O\N,%4
|OtO Ϗ P U OӈN(O|P* T-|LlM-ǔM4 QpOePsP܄cэtQL - RیODQRuЁ J9t]КϫD6Q R%*=+4-E4-( SӐRK5=l
S0 1=S*S4<M_lFlT IQm9ҵSDT+T odDбaLV5Be(=M#$ˌ($OtQT
S
J-C W",E-8/=
QV A}>o5T$LEeĬϼQiEuP5Ul_V{=Qz-XOqMVrf%O' Q\mWnTb5(c-?JsuReuW ExVU`}Xp%E+ Ԗ-U MWP UֱPؐe;uؒU-Պ}T)MDZU'ӔUVяTUyZ ۨuU|e5[=Zcnۆ۔\מ ZͫV5l˿ELJ[ ռم[roMTN[S[ ZŵTǍ[\[}}ZR\Ǿ ٩}[Gd5[\̅UέWHٳ}ӌP$Ȃt ^^%5_ ݜu[έZ#ټZE~_ `FV`&CMm]ȍKeT٭\DL
[ϕmJ JE.&
atW=Uu7 ^^%u^^L[ma ~a
VT ao3\]H)*+b2>"%),01.42`\ͼ/Ѕ]5a7 EX9: Ta] N?@ O%Vc&]vЏ c H3.͌ث
ZG+JMVPSKR\Nd']"e 954^Vdzee.];e{d%aOmc_VUYE`YH*f!P Aؿ:fMfdW~f&潡VUD@p
g_m~WTH`>vgsgM!SL^fZmfg'EZhѤejs6u>^hЀhQ&z{~^ɉPќٌؙ ]FhXYiEy[gP6 = jIX>iw]M٥ F4eDf^r|٫X h e.ZjFvk0[n^v*VRjj>Zi H =vҎa>)^VʦÎVXj-QMmVW5零jm.݆V]ff&Aؼ ϞN fvhh@n .nڎ g~neVN PdCoC
dPp Inڈp6[ ~mv_T`UkaF VI=h 9'` qq
]- ~jgd /o
Ц=f'(7k/ vtmmtg"?ql+_oFŶn)s7G0a_bQLrV\Oj.' RneBGM -nsn =O1_2g3G}vrHoNػ*a:e;ꣽVDW
j1G'o[4VivmWnXuQsDtb7.fp!uVrqfr_ WwlfEFGvXv0uj%vFwnrOqwVOvtlvsWnXt,i iVW5O^Z(}Gv,ox~mknvnk턟 &0b: &,7pNwxgxZY6/r''u1v|vygŝwyu=y]E^Fwe2z2EJ]&6/WygyN~zg.zN{eZMowW˳oguf{>?d?z@WOyZzB-\mf|w' G ?ށWտOwgo9{dgz}x}>|gz|͟oe}n~v#f%~ .23'No\tIÿ
JaÇ#RhqŊ7j %$ʔ*zAY͜8w'ϟBj%J4R&RI\i*֬ZrM)GE(,ڴh 2Jȥ;.zw)$ے'ղtI.] \̘7_3ϢCҩ*zjUƲglniU7_/nj6]̸ wBn:vmإ.o;k><pTeoB 2}
w
y~]G{
zg M ဟ,G~iWyqx}Ϥ]-X!iADc9^uax(xr
Yu?*YvH1#)hVeB<3ߒa!5"A# ܛ5i`v-f7%U^yVelq硐e)i"Y &Tާ9[8vQVjT.jvAvlh(qY(szU'.J9jV%Բ$5k .zfnFf*-S"
[#R ~.rk+ .?ZmIJ,1cl.qnkg/'
*rlqO 0ۜ܇- 3@;G< xܦ/ ]4|GA
抛7Ö3Af%ʢ6B[3a5
-˧y;u]]sGKHʆvϩ"rEM9rOzzޡr4o傍Lڸ3 9S`k0=<J.覿5WS+?XWW\cG<_{ϊILJ1[u埏 CB&9ぬG_yާ!pXC^b Nt 0f"Z
ޏL{BnŹۻNbń:\`
(%|s ?
R mH ᎂhœ$( VERb!Fɉ1@ -ʨtl xa+v l}
F /ǚjս1o 8<V!%!`\뾆=9qf9 xHu2`1[(V0M8QYV xe*\ &{=<OØ܊edSVbV;;0K3S,E9<eLs{
!6P! \:Z.c~J7I+Ԥ zM+ug?y4T4u2pf[zЋTVr
u(Dٙ8S.gÄ3ƗJdg#P
o(eBԣ>3B+5
{`<qjH"8;WTYʔ7hTZi"[@ 5ta<i2Ѯ?"i Iи~za]%1B?X
nE!a:眬j6@N,$KAfVf[KӢZ^5J[6]kkU2UPc/UrJm`%
g; ΓL=Ulm7z3GەZQts>JmfkVŷnd;`w5/Z]7A 0 Ch0?,b8% Sիr.A4qo >{ ! Ar_CE{G-kY20yf[Q`}02 g8˹tlg=y~3gVmi` Gjn+E%?M9{iѸqiR^:ќ)r5^-</¯(Mu WM-ȺZE]aױ>d;d ~6-iS־6
:$-qfAzu~7-yӻf <`lz7mnz[DP8#.S}%_J]ǏKk &w0O[|#/Z.o|+ bY
19?n`W+3Թso'ǭVnt1!}@ \Dz/>WƬTK@S^*qu}:0'}`߿HĿo; [={D"_=;9vR:`w|c) >b OʶYWAzPƒG;}xOx"<2{>G%|Ci]{/-DdV}|⏲Cy}[
U'+ J_}}RǾ藿__v__ :
6o՝y1ߕ q#}8> ]!`` ޱ `T9 MIk3I
F! &aڟ_`X VazP] `:~^ZT8M` ! !-I^] bU) R$^" V &$v"T").&^'*Z(&F+bU,- \.!z/n+ "#2E]%#3ޝ1v]4V5_646Z#--~K c6"-J:U#S<"#;D3c*->ң>=;9Z?c.dH :d5 $BʢB*CCF#DFd+NdchR\$It%bFz$)r?T7Ay bI^$HIz JRt!H:~ktB8,@
(%qB
R-cqt8On$PJ(8A :d>QM"S$$Z"e[JxU(DX#` 8Z*t T;A88[_нT`P%=8Ce $^:^^*b/4%< l b
(< R:`iN% A9-D&:Cq@iNVj"B>A6Q@ Dea L |/0L/C9@r~b@TC<@K;`gvv 'X> RZށI~+ >T C><@g7f q&o= T >(V!|T>`T9@)"]" <Rh,((鬆w'2E,LÉFj'Un^B"<%,>dC,L0C6~$)6)f \ivf
hNEC)ACiΥ)*Z%& NE1C3 CaD?Ct*(- <TĂ6äj^*2b>{=-j<C*>H~k<?B>hDk* +ƫ+֫~J-ô6&
ܫ.,6>,FcPV?(S C^뺢H,ɖRlHXB ,ˮ @L`+k",- -%0F?Ѯ@L칎,Ϻ2An-v~-؆-.=-2=C,~-rm٢"D?`l>,=d̬NÜ6 .nn 2LBj**e9C,?n+(.v)<.-, <@bjn6Ann=P)~ ʚ)@-g-8ob?`/fE҃; Cno*22QJCj|j8+Bn"0.%|><.C5Lcf*CuB80X(>\o=\Q<B?HRL0pHCb qA 0";<&I=p p9ǒ$noĶ(D q +*C*Oqka :R#0$A7߾A." '. qB2)1 r)?2+%5'cA r
ñ+w( )@!tC>HK0&82co$+* 30ks1S$1:C&rJ)_+q6r*wsr:30tC rr;*6'4C1 B='I0:<r+/sC/4I#t)s7@ XCm/hP0*<sC6ְ߳"3$BHICCMD56Բ+0rjx45MItNsSo7wHJ{)4- B=:cNsS?uO
>B jB=?x0@B4#5*<35Y4_qTK5)
H9UB( H{RHtdG66{3Pr4,/ u51sXu^v[c )0v:vBC=sXve7D4
d65802h9`puVc6puj3e6lm:v t(<tY6C{OK7| 7z @too;u|xvv
A? wk&lqz.{˷og8|8TYmB4]X|su_K@J x=A5kwnpC#w4i7dWykOBlD~v
w|(y2J7Bc*^7sx Ԁw 9zx7@(CHy״O#.tz&u(7ծ8aMr:@ǹ6O@Ш2'5z/ux
l)D/
y70Cn:~z'׀\Ay +{Am7+`<?DS[{fAAo{ ;1C/;~&|2,;3:g 8HCn A9VA0xÁڻ5뵃@/<4K/co Xo+ %,@{<n
W'|nwz꺼7T(IÈ .ʯ{tC1@-WzыE:;'A]:AH{}<h9H֛:1t 4No;W^8Ք;9ۿOCSHϽZ=_K{Ȃ:Ѓy C/4:-YJ৶[~Ok~p>·~6B7S33h 7;1 )D:@@3 ,%TP! >|bD )JXaF A9H\ 7K o⹐)3O[9
6R#Ə+B Q%&UiSOA@ttYOLUdSp)E}
qhƉ
/BKR ӄ埋<ִѸ \HO$t,0gּB0Ҟk?$ZaQVzTL C`aѵ n5W$`M Vz81QC>]8 pzs s;3U۱4ى>~src%k`ޠ(\:ps )3p8 3>h ~9.)ꬋh;P4q1GjBwI@ .9!Q)ztJ)~e)/|-J R5
3 j $TO14F< ) \SP'9 TEm@I)t?TM8
UQI-SQMUUYmW
;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding AD LDS Replication and Configuration Sets</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Replication and configuration sets</maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) uses replication to provide fault tolerance and load balancing for directory services. AD LDS uses a type of replication called multimaster replication. Through replication, AD LDS copies directory data updates that are made to a directory partition on one AD LDS instance to other AD LDS instances that hold copies of the same directory partition. AD LDS instances that hold copies of the same directory partition or partitions form a logical grouping called a configuration set.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Multimaster replication</maml:title><maml:introduction>
<maml:para>Multimaster replication simply means that you can make changes to directory data on any AD LDS instance. AD LDS replicates these changes to other members of the configuration set automatically. Multimaster replication is characterized by loose data consistency with convergence. When you make changes to data on a given directory partition at one AD LDS instance, replicas of that directory partition that are stored on other AD LDS instances become inconsistent with the most up-to-date replica of the directory partition (the partition where the changes were made). However, as changes get replicated through the configuration set, all partition replicas once again become identical; that is, they converge to the most recent data. </maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Configuration sets</maml:title><maml:introduction>
<maml:para>AD LDS instances replicate data based on participation in a configuration set. All AD LDS instances that are joined to the same configuration set must replicate a common configuration directory partition and a common schema directory partition. AD LDS instances in a configuration set can also replicate any number of application directory partitions. AD LDS instances in a configuration set are not required to replicate all application directory partitions in the configuration set. A single AD LDS instance can replicate all—or any subset of—the application directory partitions in its configuration set. An AD LDS instance cannot, however, replicate an application directory partition from a different configuration set. </maml:para>
<maml:para>The following illustration shows an example of two AD LDS configuration sets, each with two AD LDS instances. As shown in the illustration, a single computer can run multiple AD LDS instances, each in a different configuration set.</maml:para>
<maml:para><maml:embedObject><maml:objectUri href="mshelp://windows/?id=92183d99-a1a3-4949-b33d-1ea4a6e683ed" mimeType="image/gif"><maml:summary>Two AD LDS configuration sets with two instances</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>An AD LDS instance can be joined to a configuration set only during installation of the instance.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Preventing replication conflicts</maml:title><maml:introduction>
<maml:para>What if two different users make changes to the same data on replicas of the same directory partition on two different AD LDS instances? In this case, each AD LDS instance attempts to replicate the changes, creating a conflict. To resolve this conflict, replication partners that receive these conflicting changes examine the attribute data that is contained in the changes, each of which holds a version and a time stamp. AD LDS instances accept the change with the higher version and discard the other change. If the versions are identical, AD LDS instances accept the change with the more recent time stamp.</maml:para>
<maml:para>If two or more values in a multivalued attribute on an object are updated simultaneously on two different AD LDS instances, only one of the updated values will be replicated. In other words, simultaneous updates to a multivalued attribute that occur on two different AD LDS instances are considered to be in conflict, even if the updates apply to different values within the multivalued attribute. The only exception to this rule is for linked-value attributes (such as group memberships), which do allow for simultaneous updates to different values within the linked-value attribute.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Replication topology</maml:title><maml:introduction>
<maml:para>Knowledge Consistency Checker (KCC), a process that runs as part of each AD LDS instance, automatically constructs the most efficient topology for replication traffic to follow based on the network. The KCC regularly recalculates the replication topology to adjust for any network changes that occur in the environment.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>An AD LDS configuration set maintains its own replication topology, separate from any Active Directory Domain Services (AD DS) replication topology that might also exist. Directory partitions cannot be replicated between AD LDS instances and AD DS domain controllers.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Ensuring replication security</maml:title><maml:introduction>
<maml:para>To ensure replication security, AD LDS authenticates replication partners before replication, and replication authentication always occurs over a secure channel. AD LDS uses Security Support Provider Interface (SSPI) to establish the appropriate authentication security level between replication partners. The method that is used for replication authentication within a configuration set depends on the value of the <maml:phrase>msDS-ReplAuthenticationMode</maml:phrase> attribute on the configuration directory partition. After replication partners have successfully authenticated, all replication traffic between the two partners is encrypted.</maml:para>
<maml:para>The following table describes the security levels for replication authentication and the corresponding <maml:phrase>msDS-ReplAuthenticationMode</maml:phrase> attribute value for each security level. The default replication security level for a new, unique AD LDS instance is 1, unless a local workstation user account is specified as the AD LDS service account. If a local workstation account is specified as the AD LDS service account, the replication security level is set to 0.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Replication security level</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Authentication mode</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Supported environments</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Mutual authentication with Kerberos</maml:para>
</maml:entry>
<maml:entry>
<maml:para>2</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Kerberos authentication, using service principal names (SPNs), is required. If Kerberos authentication fails, the AD LDS instances will not replicate.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The configuration set must be fully contained in an AD DS domain, forest, or forest trust.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Negotiated</maml:para>
</maml:entry>
<maml:entry>
<maml:para>1</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Kerberos authentication (using SPNs) is attempted first. If Kerberos fails, NTLM authentication is attempted. If NTLM fails, the AD LDS instances will not replicate.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The configuration set can contain Microsoft Windows NT® 4.0 member servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Negotiated pass-through</maml:para>
</maml:entry>
<maml:entry>
<maml:para>0</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All AD LDS instances in the configuration set use an identical account name and password as the AD LDS service account.</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The configuration set can include computers that are joined to one or more workgroups or that are joined to multiple domains or forests without trust relationships.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To help maintain AD LDS replication security, the following best practices are recommended:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Use the highest level of replication security that your environment can support.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In AD DS environments, run AD LDS on member servers, rather than on domain controllers, whenever possible.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you run AD LDS on a domain controller in an AD DS environment, do not use the Network Service account as the AD LDS service account. Instead, use a domain user account that does not have administrative privileges.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In workgroup and Windows NT 4.0 environments, do not use an account with administrative privileges as an AD LDS service account.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Use separate configuration sets for applications with strict isolation requirements.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For more information about AD LDS replication requirements for service accounts, see <maml:navigationLink><maml:linkText>Service Account Selection</maml:linkText><maml:uri href="mshelp://windows/?id=e3d6fde7-470e-49dd-8477-37190bed38df"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=4fd8db90-43e2-4b3b-85f8-af92aab5249c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Manage Group Memberships</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>To control access to directory data, Active Directory Lightweight Directory Services (AD LDS) relies on permissions that are granted to users and groups. AD LDS supports the simultaneous use of both Windows users and AD LDS users as members of AD LDS groups. AD LDS provides four default role-based groups. You can create additional AD LDS groups as necessary. To create AD LDS users, you must first import the user object class definitions that are provided with AD LDS, or you can supply your own user object definitions.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS users and groups.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Extend the schema of an instance to include user classes.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Add users to the directory.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add an AD LDS User to the Directory</maml:linkText><maml:uri href="mshelp://windows/?id=e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Add members to AD LDS groups.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add or Remove Members to or from an AD LDS Group</maml:linkText><maml:uri href="mshelp://windows/?id=9bbcb7e7-8db2-405f-a9d8-93022e535747"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a New AD LDS Instance</maml:title><maml:introduction>
<maml:para>You use the Active Directory Lightweight Directory Services Setup Wizard to create Active Directory Lightweight Directory Services (AD LDS) service instances. In AD LDS, a "service instance" (or, simply, "instance") refers to a single running copy of the AD LDS directory service. Multiple instances of the AD LDS can run simultaneously on the same computer. (This is not true for Active Directory Domain Services (AD DS).) Each instance of the AD LDS directory service has a separate directory data store, a unique service name, and a unique service description that is assigned during installation. During AD LDS installation, you have the option of creating an application directory partition if your Lightweight Directory Access Protocol (LDAP) application does not create one for you.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To use the Active Directory Lightweight Directory Services Setup Wizard to create a new AD LDS instance</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Lightweight Directory Services Setup Wizard</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Welcome to the Active Directory Lightweight Directory Services Setup Wizard</maml:ui> page, click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Setup Options</maml:ui> page, click <maml:ui>A unique instance</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Finish creating the new instance by following the wizard instructions.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89a^ p , ^ 0 448< << @@@ DDDD HHHHP L L P P Y(P ]$U(U$Yei0Y(] e,]0]4] q8]i u8a<e@eq 8mu Hm y LqPq UyUy 0YyY}Y}L]}]}]P8aaUe@i mH]m$qPuy04y8}}@ae΅qH҉ҍPquaցeiڅmqڍyލު H0)\ȰÇ#JHŋ3jq㵃 C Iɓ( 0˗0cʜI͛8sɳϟ<)4IIѣHҨӧPJJիXjʵׯ\IJ٣K]˶۷p6{ݻ˷߿{ L^+^WpǐI fLT GY)S̠CG^:Ӱ nMұsmoиu 7!ȓ+_μУKNسg35'y1 ӫ_Ͼ˟O,>GH'` 6:ނVh!Yvn#e h"8\*Xa.b4r T8،:( >>xSw䑺lC6UPdvhd\v`)dr@h[^!YsiH]Vo fwrYW݉_zgp f:})U%@)vZ%OW ZRV(Ǫ#UM;lekHS֯% ە:Z쬲fK,߲˂ԬE}*\Qkm[Sk/Rո5{й覤.[+T6|p[A T˖" /{bZlnv sLin6q^>2Joj \%$kH 5g;TϨFHM;-bS}2=cM WjRԭ@sv'7{T@Wm.\mi#8rG 8ߐw䖣4g)4!u8X xw^w&m.N15<櫃HӮ5@ ϯ:H++CG]|.|$%v@B @ %yAٷvo+u[O
&! * @{ \vMdG5pS>$mC5G A~?) kȰ4!Mip3$S(A
pNY6la `4"Ҷx!lhpi^
' Jh,- c#( qI^P4c+ CG Q7xE>6 G2a
7DH d
{b#x)xY*^&=&;J" @bDPj4Z
5P.r,ՅNeg2h̆2JY8`T5:l$;_W9 [i )5 p ʌ;J#γe=ODĜ CyvD X " 0}'3+EfiIg??
<]l$N*ΨTK,u)`
6D"rƧ?eFK"mOo!-KT \*xͫ^U]꺨jUT9]?XTk ]BT1]Gwm(}G ˦ҚVL h8ȉ BYED}ED=},+)[6T,h*KmZ ' lXЖ Cn/6|ͷVMQ lsaF" V"H%r1gwy?V'TyŰnEK{:uaE"AAlS "U݂*+td&~^
م:RfLN!x;c<cCek]G6 #5 {q"{LטJeYa!JCTܸϒ3; <= pSfC1 B os??Y!tpm
͎"^N4[:! n`jYr,gzQxƊ3ꢸZ 'g AQPDQ`svx#=M-<oyu+ .ӧh!?θBY dѐùU+b^JG>Ҹ:6( rQGp^uh>qj\x%" h8y,|-9qG^ <K <Ī*_ly{tLus<k 3N.SK K(VHx:];uZNi{31Yzk&; sd^]9/c{^ڬ7i`8f#S{ Q}ك? e7U^ ܂slKy Sܟe'?v B?V˭ `fFa2̆{(K;7e#wtbz wq7:4\rag~сEuvkxSsR6}qg.t1tmYX'xh\уQ@PX?FH:!,lׄNgCH6XCTxMl:tg101tXa Wp zb-
$v(؈h æH%8p| uׇr.Q $ aXk3 <҉1Vf|8 %1@oi %h 3WsX٧ Zhx[(\hh
2ZR!3NhDZ2((]8xwy؍%؏8sx D@ha`PU
H|( i, I{ !Ic#IhH')+S2Y-i6 8 ؓ@94xDiFyǐ&iєNi֏KTY
\y;`b9Gs
`
rjY{l9nYP% `wheRO%KI(AZII}%9xɘxqək陞IYfYїɚxRITgjx ɛ蚄Iv
! YW$y `*iA@d)5꒞ )3)(Y詟y9'i19XQTr
j %.T1PRr
5 "$?w&
+:d&yDy!97K5B8J:ڠ)ږ>z0Dv4pdaByOjTZ$ + |g\cwz !`c_lHA6NZMMکC~g~c{&ɧ~}|[`PjϷ-$`'|vɓI*.
W$Y*ڢG%Jjʨz<ګJ*Jz}*#VZZ=|DG{=ҭ($*fjƺ#ZfX"ʖ Xʯ̊!#$M:f'#J[# k谰
%:4Rz
1"J{nB6"8:KvKv6ʥ?HyZ;L{ ˴@ڦ7A"C:1kdzuJV7zb|ꑺ* 3cj{mKoaKq
GyNۡ, ;|Wk=fhj:Jj+CwhglM:^6]"_{[S'rZM[O@ - ʻ&K۷#(Kj ¼ kkK5+K۸kʽ ۫˾}
"$j
* B 1+ʧ`pZ<%*PWiIʿ ~ < &\ #챙
B 0l!2 #] T`;\[;p` u
G,!=|"pnv
em*Ul#( % D ڀ Ià
W%PP
¸2?
4 ܰ
v,g $0YCU `
0Xɖ|ɘ #°Xpנ P ǀb vʰ ˲<˴l ܑĪ 6
`͐ 0& f)?p `
PsN|ɜp̐Jې
Q
<e %CD
=,
@
iؼ $ >#lF@ l=Ѯ6 pxm А@iL&}#X7 \Cilk# |8,PC]\Lɐ
6ӇU6HRC IOQ B=4]%I7
RzDmXZ-0
\ M!= HP#]~׀ M&jm =@
tH ]d\ȘM88^_,E@mpEmԖ٪ g
Bmתϩڪ <=po$ʗe ܮ-]V
Cmf -@dTԁ'x} d QT}V܍K]yS]° k
5 Hޝ}<n(\ ^x $r@ \sj#>\ S@&%Nx/0$0lސ6g m>#ߍK:!O3.>ɰ=2 5. nh- G~4&VA p M neݽm:j" ߓV(.9C HV i 7^%G Dޑ'䒮~q.
р3^=
s1>꙽
v _>Ys% Pڽϐvg pYy}S4 N- 7Ah`
P0p.. *@? J%,NY U.A` _ ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding AD LDS Instances</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) uses the same architecture—and even the same code base—as Active Directory Domain Services (AD DS). AD LDS provides a hierarchical data store, a directory service component, and interfaces that clients can use to communicate with the directory service. AD LDS does not require a domain controller or a Domain Name System (DNS) server. </maml:para>
<maml:para>The following illustration shows the relationships between the components of AD LDS.</maml:para>
<maml:para><maml:embedObject><maml:objectUri href="mshelp://windows/?id=f0d05323-4cee-406a-9d1a-ad5083970d0f" mimeType="image/gif"><maml:summary>AD LDS architecture</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>AD LDS manages the directory data store, responding to directory requests from directory clients and from other directory services. The AD LDS directory service runs in the security context of the account that is specified as the AD LDS service account. The AD LDS directory service provides all the following functions:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Authentication of directory users</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Fulfillment of data requests</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Data synchronization between directory servers (through multimaster replication)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Data management</maml:para>
</maml:listItem>
</maml:list>
<maml:para>AD LDS manages replication by grouping AD LDS instances into configuration sets. For more information about AD LDS replication, see <maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>The AD LDS directory service allows or denies access to clients based on credentials that the clients provide. AD LDS supports all the same authentication, or binding, methods as AD DS. For more information about authentication and data security, see <maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>AD LDS service account requirements vary, depending on the computer on which AD LDS is installed and also on the replication scenario. For more information, see <maml:navigationLink><maml:linkText>Service Account Selection</maml:linkText><maml:uri href="mshelp://windows/?id=e3d6fde7-470e-49dd-8477-37190bed38df"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>In AD LDS, a "service instance" (or, simply, "instance") refers to a single running copy of the AD LDS directory service. Multiple copies of the AD LDS directory service can run simultaneously on the same computer. (This is not true for AD DS.) Each instance of the AD LDS directory service has a separate directory data store, a unique service name, and a unique service description that is assigned during installation. </maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a New AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=13afca07-9bcb-47fa-b686-22bbfdcfa7fb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Install an AD LDS Replica from Media</maml:linkText><maml:uri href="mshelp://windows/?id=6caaf52f-4400-44e3-91e9-2d40b224b139"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>File Locations</maml:title><maml:introduction>
<maml:para>On the <maml:ui>File Locations</maml:ui> page, you can view and change the default installation directories for Active Directory Lightweight Directory Services (AD LDS) data (.dit) files and recovery (.log) files.</maml:para>
<maml:para>By default, AD LDS data files and recovery files are installed on the destination computer in the following directory:</maml:para>
<maml:para>\%ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename</maml:replaceable>\data</maml:para>
<maml:para>where <maml:replaceable>instancename</maml:replaceable> equals the AD LDS instance name that you specified on the <maml:ui>Instance Name</maml:ui> page.</maml:para>
<maml:para>By default, AD LDS program files and administration tools are installed in the following directory:</maml:para>
<maml:para>\%windir%\ADAM</maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>If the directory paths that you specify do not already exist, the Active Directory Lightweight Directory Services Setup Wizard creates them for you.</maml:alert><maml:alert>The Active Directory Lightweight Directory Services Setup Wizard does not accept environmental variables in file location paths.</maml:alert></maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Import Data into an AD LDS Instance</maml:title><maml:introduction>
<maml:para>The <maml:phrase>ldifde</maml:phrase> utility creates, modifies, and deletes directory objects. You can use <maml:phrase>ldifde</maml:phrase> to populate Active Directory Lightweight Directory Services (AD LDS) with data from other directory services. You can also use <maml:phrase>ldifde</maml:phrase> to extend the schema and export user and group information to other applications or services. For example, you can use <maml:phrase>ldifde</maml:phrase> to export directory objects from another directory service and then use <maml:phrase>ldifde</maml:phrase> to import the directory objects into an AD LDS instance.</maml:para>
<maml:para> Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To import or export directory objects using ldifde</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To import directory objects, at the command prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>ldifde</maml:computerOutputInline> <maml:phrase>-</maml:phrase><maml:computerOutputInline>i</maml:computerOutputInline> <maml:computerOutputInline>-f</maml:computerOutputInline> <maml:replaceable>filename</maml:replaceable> <maml:computerOutputInline>-s</maml:computerOutputInline> <maml:replaceable>servername:port</maml:replaceable> <maml:computerOutputInline>-m</maml:computerOutputInline> <maml:computerOutputInline>-a</maml:computerOutputInline> <maml:replaceable>username domain password</maml:replaceable></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To export directory objects, at the command prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>ldifde</maml:computerOutputInline> <maml:computerOutputInline>-e</maml:computerOutputInline> <maml:computerOutputInline>-f</maml:computerOutputInline> <maml:replaceable>filename</maml:replaceable> <maml:computerOutputInline>-s</maml:computerOutputInline> <maml:replaceable>servername:port</maml:replaceable> <maml:computerOutputInline>-m</maml:computerOutputInline> <maml:computerOutputInline>-a</maml:computerOutputInline> <maml:replaceable>username domain password</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>-i</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs an import.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-e</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs an export.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-f</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the file to import or export.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>filename</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the file to import or export.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-s</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the host name and port of the AD LDS instance or other directory service.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>servername</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The host name of the AD LDS instance or other directory service.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>port</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The port for the AD LDS instance or other directory service.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-m</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Ignores (that is, does not import or export) attributes that are used only by Active Directory Domain Services (AD DS). </maml:para>
<maml:para>You can use this parameter when you export directory objects from an existing AD DS forest and import them into AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-a</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies account credentials. If they are not provided, <maml:phrase>ldifde</maml:phrase> uses the credentials of the currently logged on user.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>username</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The user name of the account to be used to bind to the specified directory service.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>domain </maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The domain name of the account to be used to bind to the specified directory service.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>password</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The password of the account to be used to bind to the specified directory service.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-h</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allows the importing of passwords using simple authentication and security layer (SASL) encryption.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>-c <maml:replaceable>String1 String2</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Replaces all occurrences of <maml:replaceable>String1</maml:replaceable> with <maml:replaceable>String2</maml:replaceable>. With AD LDS, you can use the constants <maml:computerOutputInline>#schemaNamingContext</maml:computerOutputInline> and <maml:computerOutputInline>#configurationNamingContext</maml:computerOutputInline> in place of the distinguished names of the schema directory partition and configuration directory partition when you replace strings in .ldf files. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>Ldifde /? </maml:computerOutputInline></maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ldifde</maml:linkText><maml:uri href="mshelp://windows/?id=8cccc00d-b452-4109-a1a5-60e1af3af95e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>View or Set Permissions on a Directory Object</maml:title><maml:introduction>
<maml:para>You can govern access control in Active Directory Lightweight Directory Services (AD LDS) at the directory partition level by assigning user memberships to the role-based groups that are located on each partition. You can also customize access control in AD LDS on an object-by-object basis using the <maml:computerOutputInline>dsacls</maml:computerOutputInline> command-line tool. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To view or set permissions on a directory object</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the command prompt, do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To list the effective permissions on a directory object, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>dsacls \\</maml:computerOutputInline><maml:replaceable>hostname</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>portnumber</maml:replaceable><maml:computerOutputInline>\</maml:computerOutputInline><maml:replaceable>object_dn</maml:replaceable></maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>hostname</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the computer on which the AD LDS instance that holds the directory object is running.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>portnumber</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The communications port number on which the AD LDS instance communicates.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>object_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The distinguished name of the directory object.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>Example:</maml:para>
<maml:para><maml:computerOutputInline>dsacls \\localhost:389\O=Microsoft,C=US</maml:computerOutputInline></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To grant permissions on a directory object, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>dsacls \\</maml:computerOutputInline><maml:replaceable>hostname</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>portnumber</maml:replaceable><maml:computerOutputInline>\</maml:computerOutputInline><maml:replaceable>object_dn</maml:replaceable> <maml:computerOutputInline>/G</maml:computerOutputInline> <maml:replaceable>user_or_group</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>Permissions</maml:replaceable></maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>hostname</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the computer on which the AD LDS instance that holds the directory object is running.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>portnumber</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The communications port number on which the AD LDS instance communicates.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>object_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The distinguished name of the directory object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>user_or_group</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The user or group for whom the permissions apply.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>Permissions</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The permissions to grant.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>Example:</maml:para>
<maml:para><maml:computerOutputInline>dsacls "\\localhost:389\cn=Object1, cn=container1,O=Microsoft,C=US" /G "CN=inetuser1,O=Microsoft,C=US":SD</maml:computerOutputInline></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To deny permissions on a directory object, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>dsacls \\</maml:computerOutputInline><maml:replaceable>hostname</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>portnumber</maml:replaceable><maml:computerOutputInline>\</maml:computerOutputInline><maml:replaceable>object_dn</maml:replaceable> <maml:computerOutputInline>/D</maml:computerOutputInline> <maml:replaceable>user_or_group</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>PermissionStatement</maml:replaceable></maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>hostname</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The name of the computer on which the AD LDS instance that holds the directory object is running.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>portnumber</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The communications port number on which the AD LDS instance communicates.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>object_dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The distinguished name of the directory object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>user_or_group</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The user or group for whom the permissions apply.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>PermissionStatement</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The permissions to deny.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>Example:</maml:para>
<maml:para><maml:computerOutputInline>dsacls "\\localhost:389\cn=Object1, cn=container1,O=Microsoft,C=US" /D "CN=inetuser1,O=Microsoft,C=US":SD</maml:computerOutputInline></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For a complete description of all the parameters that apply to <maml:computerOutputInline>dsacls</maml:computerOutputInline>, including the setting of inheritance, type <maml:userInput>dsacls /?</maml:userInput> at the command prompt.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A directory object that resides on multiple replicas of a given directory partition possesses the same permissions on all the replica partitions.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell™. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see View or Set Permissions on a Directory Object (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137814</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137814"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Directory Partitions</maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) stores directory data in a hierarchical, file-based directory store. By default, the directory store for a given AD LDS instance is located in the following file:</maml:para>
<maml:para>%ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename</maml:replaceable>\data\adamntds.dit</maml:para>
<maml:para>Each AD LDS instance has a separate directory store. Any data operation that you perform in AD LDS, including searches, reads, imports, exports, indexing, replication, backups, and restores, uses the AD LDS directory store in some way. The directory store is organized into logical directory partitions, also called naming contexts.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Like Active Directory Domain Services (AD DS), AD LDS uses the Extensible Storage Engine (ESE) to manage its directory store.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Directory partitions</maml:title><maml:introduction>
<maml:para>The AD LDS directory store is organized into logical directory partitions. There are three different types of directory partitions: configuration, schema, and application. Each AD LDS directory store must contain a single configuration directory partition and a single schema directory partition, and it can contain zero or more application directory partitions. The following table summarizes these partition types, their contents, and AD LDS requirements.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Partition type</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Distinguished name</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required/optional</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Contents</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Configuration</maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=Configuration,CN={<maml:replaceable>GUID</maml:replaceable>}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required</maml:para>
</maml:entry>
<maml:entry>
<maml:para>AD LDS configuration information</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Schema</maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=Schema,CN=Configuration,CN={<maml:replaceable>GUID</maml:replaceable>}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Class and attribute definitions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Application</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Assigned during partition creation</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Optional</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Application data</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Configuration directory partition</maml:title><maml:introduction>
<maml:para>The configuration directory partition holds information about AD LDS replication scheduling and replica sets, information that defines the other partitions in the replication set, information about the users and groups in the replica set, and other information.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Schema directory partition</maml:title><maml:introduction>
<maml:para>The schema directory partition holds the definitions for the type of data that can be held by the directory store. The AD LDS directory service relies on the definitions in the schema partition for maintaining data consistency. In addition, applications can refer to the schema partition to determine the type of data that the AD LDS instance allows. You can extend the schema to allow AD LDS to hold data that is specific to a particular application. For more information about AD LDS schemas, see <maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink>.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>A common configuration partition and a common schema partition are replicated to AD LDS service instances that belong to the same configuration set. For more information about replication, see <maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Application directory partitions</maml:title><maml:introduction>
<maml:para>Application directory partitions hold the data that is used by your applications. You can create an application partition during AD LDS setup or anytime after installation. Depending on your application, you might extend the schema manually or your application might automatically extend the schema for you. Typically, you manage data in a given application directory partition through your application. After the application directory partition is created, AD LDS holds the application partition reference objects in CN=Partitions,CN=Configuration.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=4fd8db90-43e2-4b3b-85f8-af92aab5249c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Administering Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=ab5c668e-f30d-4e72-a0be-56066522d9e5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create an Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=f43b2a3a-18ec-4f24-84d6-90df5a93c750"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>AD LDS Administrators</maml:title><maml:introduction>
<maml:para>On the <maml:ui>AD LDS Administrators</maml:ui> page, you must select a user or group to become the default administrator for this Active Directory Lightweight Directory Services (AD LDS) instance. The user or group that you select will have full administrative control of the AD LDS instance.</maml:para>
<maml:para>By default, the Active Directory Lightweight Directory Services Setup Wizard specifies the currently logged on user as the administrator for the AD LDS instance. You can change this selection to any local or domain account or group on your network.</maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>If you specify a group to become the AD LDS administrator, every member of that group will have administrative control of the AD LDS instance.</maml:alert><maml:alert>The user or group that you select automatically becomes a member of the Administrators group in the configuration directory partition of the AD LDS instance.</maml:alert><maml:alert>Do not specify built-in groups or built-in accounts, such as DOMAIN\Administrators, as the AD LDS administrator. Instead, if you want to specify a group, specify a domain group, such as <maml:replaceable>domainname</maml:replaceable>\Domain Admins, where <maml:replaceable>domainname</maml:replaceable> represents the name of your domain.</maml:alert></maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>The Active Directory Lightweight Directory Services Setup Wizard creates an Active Directory Lightweight Directory Services (AD LDS) instance. The following topics provide information about how to complete each step in the wizard: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Setup Options</maml:linkText><maml:uri href="mshelp://windows/?id=4aed37e2-52c6-4b35-9db3-6bf8a4ba6051"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Instance Name</maml:linkText><maml:uri href="mshelp://windows/?id=a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ports</maml:linkText><maml:uri href="mshelp://windows/?id=79f98741-9126-4cbc-be61-c26a4cb66ef3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=fb629986-509c-4dcd-9e90-a04ab038b94d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>File Locations</maml:linkText><maml:uri href="mshelp://windows/?id=180087b1-342c-4ec4-9d3d-b806f2ab7290"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Service Account Selection</maml:linkText><maml:uri href="mshelp://windows/?id=e3d6fde7-470e-49dd-8477-37190bed38df"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administrators</maml:linkText><maml:uri href="mshelp://windows/?id=26f03d1e-5a57-4cc9-a39e-2c082cd9597d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import LDIF Files</maml:linkText><maml:uri href="mshelp://windows/?id=5f662b35-c775-4b92-bc46-fd1ce4f33206"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ready to Install</maml:linkText><maml:uri href="mshelp://windows/?id=b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
<maml:para>The following steps appear when you create a replica instance of AD LDS:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Joining a Configuration Set</maml:linkText><maml:uri href="mshelp://windows/?id=b8f537a7-443f-40c7-b176-bddb5c73d436"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Administrative Credentials for the Configuration Set</maml:linkText><maml:uri href="mshelp://windows/?id=af887b8c-6594-476d-ae39-992580552c15"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Copy Application Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=a80a7df3-9afa-4600-be7e-f51503c8b7be"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Copying Application Information</maml:linkText><maml:uri href="mshelp://windows/?id=517e9e1c-7060-4ad5-a542-f2915d15ebb1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Create a Replica of an Existing AD LDS Instance</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>Replicating Active Directory Lightweight Directory Services (AD LDS) instances on multiple servers provides greater load balancing and fault tolerance by distributing application data across servers. A replica of an existing AD LDS instance contains replicated copies of the configuration and schema directory partitions, including any schema extensions. You can specify a running AD LDS instance as the source from which to replicate, or you can use a restored copy of a previously backed up AD LDS instance as the data source. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS instances.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS replication.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Run the Active Directory Lightweight Directory Services Setup Wizard.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Create a Replica AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=8a4ced66-9ef7-49d5-99fb-93a8d69ae50f"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Disable or Enable an AD LDS User</maml:title><maml:introduction>
<maml:para>When you disable and enable an Active Directory Lightweight Directory Services (AD LDS) user, you control whether that user can bind to the AD LDS directory. You use the ADSI Edit snap-in to disable and enable AD LDS users.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable or enable an AD LDS user</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to an AD LDS instance. For more information, see <maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Browse to the AD LDS user that you want to disable or enable, right-click that user, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Attributes</maml:ui>, click <maml:ui>msDS-UserAccountDisabled</maml:ui>, and then click <maml:ui>Edit</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following, and then click <maml:ui>OK</maml:ui>: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To disable the AD LDS user, click <maml:ui>True</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To enable the AD LDS user, click either <maml:ui>False</maml:ui> or <maml:ui>Not set</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, an AD LDS user is enabled when the user is created. However, if you assign a new AD LDS user a password that does not meet the password policy restrictions in effect on the local server or domain, that AD LDS user will be disabled by default.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the AD LDS user that you want to enable or disable is currently logged on to the AD LDS instance, that user must log off for the new setting to take effect.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Disable or Enable an AD LDS User (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137816</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137816"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Adamsync</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adamsync</maml:title><maml:introduction>
<maml:para>Synchronizes objects from Active Directory Domain Services (AD DS) to an instance of Active Directory Lightweight Directory Services (AD LDS).</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Before you use this command, you must import the user class definitions that are contained in the MS-AdamSyncMetadata.LDF file. For more information, see <maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Syntax</maml:title><maml:introduction>
<maml:para><maml:computerOutputInline>adamsync</maml:computerOutputInline> [<maml:computerOutputInline>/?</maml:computerOutputInline>] [<maml:computerOutputInline>/l</maml:computerOutputInline>] [<maml:computerOutputInline>/d</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable>] [<maml:computerOutputInline>/i</maml:computerOutputInline> <maml:replaceable>input_file</maml:replaceable>] [<maml:computerOutputInline>/download</maml:computerOutputInline> <maml:replaceable>configuration_dn output_file</maml:replaceable>] [<maml:computerOutputInline>/export</maml:computerOutputInline> <maml:replaceable>configuration_dn output_file</maml:replaceable>] [<maml:computerOutputInline>/sync</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable>] [<maml:computerOutputInline>/reset</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable>] [<maml:computerOutputInline>/mai</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable>] [<maml:computerOutputInline>/fs</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable>] [<maml:computerOutputInline>/ageall</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable>] [<maml:computerOutputInline>/so</maml:computerOutputInline> <maml:replaceable>configuration_dn object_dn</maml:replaceable>] [<maml:computerOutputInline>/passPrompt</maml:computerOutputInline>]</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Parameters</maml:title><maml:introduction>
<maml:definitionList><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/?</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Displays command-line options.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/l</maml:computerOutputInline> or <maml:computerOutputInline>/list</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Displays all available configurations of AD DS to AD LDS Synchronizer.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/d</maml:computerOutputInline> or <maml:computerOutputInline>/delete</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Deletes the specified configuration.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/i</maml:computerOutputInline> or <maml:computerOutputInline>/install</maml:computerOutputInline> <maml:replaceable>input_file</maml:replaceable></maml:term><maml:definition>
<maml:para>Installs the configuration that is contained in the specified input file.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/download</maml:computerOutputInline> <maml:replaceable>configuration_dn output_file</maml:replaceable></maml:term><maml:definition>
<maml:para>Creates an output file in XML that contains the specified configuration.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/export</maml:computerOutputInline> <maml:replaceable>configuration_dn output_file</maml:replaceable></maml:term><maml:definition>
<maml:para>Saves the current configuration to the specified output file.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/sync</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Synchronizes the specified configuration.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/reset</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Resets the replication cookie of the specified configuration.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/mai</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Configures the specified configuration as the authoritative instance.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/fs</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Performs a full replication synchronization for the specified configuration.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/ageall</maml:computerOutputInline> <maml:replaceable>configuration_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Performs an aging search for the specified configuration. An aging search determines—by searching for the AD LDS objects in AD DS—if the AD LDS objects in a configuration have been deleted in AD DS.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/so</maml:computerOutputInline> <maml:replaceable>configuration_dn object_dn</maml:replaceable></maml:term><maml:definition>
<maml:para>Performs a replication synchronization for the specified object in the specified configuration. Use the distinguished name of the object.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>/passPrompt</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Prompts for user credentials.</maml:para>
</maml:definition></maml:definitionListItem></maml:definitionList>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Formatting legend</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Format</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Meaning</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>Italic</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Information that you supply </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>Bold</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Elements that you type exactly as shown </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Ellipsis (...)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>A parameter that can be repeated several times in a command line </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Between brackets ([])</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Optional items </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Between braces ({}); choices separated by pipe (|). Example: {even|odd} </maml:para>
</maml:entry>
<maml:entry>
<maml:para>A set of choices from which you must choose only one </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Courier font</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Code or program output</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administration Tools</maml:linkText><maml:uri href="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Synchronize with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=042987f0-b2ba-4d5a-aa65-0e0b1a92362d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>AD LDS Administration Tools</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>There are a number of Active Directory Lightweight Directory Services (AD LDS) tools that you can use to manage AD LDS instances, directory partitions, and data: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Adamsync</maml:linkText><maml:uri href="mshelp://windows/?id=40da08a3-0861-4666-bdae-1f49ff143414"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>ADSI Edit</maml:linkText><maml:uri href="mshelp://windows/?id=95fd3ac1-6fa7-4640-bca9-8651fb968e29"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Csvde</maml:linkText><maml:uri href="mshelp://windows/?id=7c663266-87be-4e4a-bbeb-889da5eafbd4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ldifde</maml:linkText><maml:uri href="mshelp://windows/?id=8cccc00d-b452-4109-a1a5-60e1af3af95e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ldp</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Synchronize Data from AD DS to AD LDS</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>You can use command-line tools to synchronize data from Active Directory Domain Services (AD DS) to an Active Directory Lightweight Directory Services (AD LDS) configuration set. This makes it possible for your application to access objects that are stored in AD DS as well as objects that are created and stored in AD LDS. You cannot use these tools to synchronize passwords between directory services. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS instances.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS users and groups.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Import AD DS user class definitions into the instance that you are synchronizing.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Import Data from LDIF Files</maml:linkText><maml:uri href="mshelp://windows/?id=8b3ee0f1-73d2-4066-99d9-529de6460244"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Run Adamsync.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Synchronize with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=042987f0-b2ba-4d5a-aa65-0e0b1a92362d"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Working with Instances</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>In Active Directory Lightweight Directory Services (AD LDS), a "service instance" (or, simply, "instance") refers to a single running copy of AD LDS. Multiple copies of AD LDS can run simultaneously on the same computer. (This is not true for Active Directory Domain Services (AD DS.) Each instance of AD LDS has a separate directory data store, a unique service name, and a unique service description that is assigned during installation. An instance can be part of a configuration set that provides replication of instance data to instances that run on separate servers. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instance Backup and Restore</maml:linkText><maml:uri href="mshelp://windows/?id=7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a New AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=13afca07-9bcb-47fa-b686-22bbfdcfa7fb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a Replica AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=8a4ced66-9ef7-49d5-99fb-93a8d69ae50f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Install an AD LDS Replica from Media</maml:linkText><maml:uri href="mshelp://windows/?id=6caaf52f-4400-44e3-91e9-2d40b224b139"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Start, Stop, or Restart an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e153d38c-6dfb-4ae4-8b39-d22fd4f79e79"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import Data into an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=1d2ea13e-3698-459a-af3b-be41255715aa"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Back Up AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=ed463518-ce97-4eb5-89b9-ec4d958edb53"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restore AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Setup Options</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Setup Options</maml:ui> page in the Active Directory Lightweight Directory Services Setup Wizard, you choose whether to install a unique Active Directory Lightweight Directory Services (AD LDS) instance or join an existing configuration set. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Setup option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Result</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>A unique instance</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If you choose to install a unique AD LDS instance, the AD LDS instance that you install will not be a part of any existing configuration set, and it will not have any replication partners. The wizard will create new, default copies of the configuration and schema directory partitions for the new AD LDS instance that you are creating. Any schema extensions that you have added to any other AD LDS instance will not be available in this new AD LDS instance. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>A replica of an existing instance</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If you choose to install a replica of an existing AD LDS instance, the AD LDS instance that you are installing will contain replicated copies of the configuration and schema directory partitions (including any schema extensions) from the instance from which you choose to replicate. In addition, you have an opportunity in the wizard to selectively replicate any application directory partitions that exist in the source configuration set. You must specify a running AD LDS instance as the source from which to replicate. To speed up the replication process for the new instance, you can use a restored copy of a previously backed-up AD LDS instance as the data source. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>An AD LDS instance consists of a single copy of the AD LDS directory service, along with its associated directory store, assigned Lightweight Directory Access Protocol (LDAP) and Secure Sockets Layer (SSL) ports, and application event log. You can run multiple AD LDS instances simultaneously on a single computer. </maml:para>
<maml:para>You can join an AD LDS instance to a configuration set only during AD LDS installation. </maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Working with Directory Partitions</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>The Active Directory Lightweight Directory Services (AD LDS) directory store is organized into logical directory partitions, or naming contexts. Three different types of directory partitions exist: configuration, schema, and application. Each AD LDS directory store must contain a single configuration directory partition and a single schema directory partition, and it can contain zero or more application directory partitions. An application directory partition holds the data that your application uses. You can create an application directory partition when you create a new AD LDS instance or anytime afterward.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Administering Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=ab5c668e-f30d-4e72-a0be-56066522d9e5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create an Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=f43b2a3a-18ec-4f24-84d6-90df5a93c750"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Copying Application Information</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Copying Application Information</maml:ui> page, you can specify the Active Directory Lightweight Directory Services (AD LDS) instance or media location from which the replica AD LDS instance will be created. You can use the network to create a replica of an AD LDS instance that is currently running on another server, or you can install an AD LDS instance that has been restored from an AD LDS backup.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual>GIF89a$ p , $ 0488< < <<@@D@DDDHHP L P P(P Ua(U$Y0Y(]i e,]0]4]0ai8a8a<a4e@eq@i Di<mHm@uPq UuHy YyY}Y}L]aaUe@YiiD ]mqPuy0u4y8i}<@aqHuPu}aցڅڅmquލ⮾ޅ q HLYȰÇ#JHŋ3jȱǏ1! Ir`9R\ɲ˗0cʜI͛8sɳ'K8J
=ጝH*]ʴӧPJJիXjݪHС`JٳhӪ]KkذcʝKݻQݾ ߿ fwoɾ+^8ka#7Lǐ̹g3mICۜe&mQV^+ ռ(.yTï._㢓˥^պSћ' 5ډF: x{s.pvއ h_ v d |߂=Ƞ^qWa)U\`Zv 'Fh|.a{%nX `!5Y4(#% G"96A; &fctSj9#^~(WoEY֔W`}1+>HjOҦsb)]dU`be梐F(_Fj]磔9(-i`
韢`zXy**I
8#}p9mt^h~+K
)ҪYmV2k#Rd`VgA_Kr*.Y_6ؽ2FˡoIO+/b|w:lWI|uyk&2T| Ļ ь8PХmD'm~*:gT4.&WZWgF`V<lp-tmroa6Yh;%.n'7R<uD Wngw[b#hO0E.vB o;{7N"TMNCߔ܇Maϔa/o=SP#LDt:
H:'HA`$R? =Gp)[
E@$#ѠR8xBa&Ck `0)4anny?$Pb HIИ8Ɔe!AȊ,
0 ţhg\BdVdVƬ'vXAh7.]T w'Ɓ?Zcu"@ r@iHs<J rGgAmʘ~ī-qL[QVby@R$ț}2v%RJz^ȴQ ٯZTq&t8b^ CSRZL bRJ49j&re/3H3Fd&>uZsR-rv.z'<Y>0ʞdaTNk3r2)u⒚^B 1dS~9/3{ţBf˩,0vAPS|TSXMxqӑyJ꺐oDSb4Q90?*z,*Nw5V"KTpU
SwŔ=Ck.:Cmů>zkKPG5RA$4Jw 6MbE-3F{mh_UשxU`Al~ '̅LqB6)].+S+"liۉf4fi'INDh\)WY.ahؙS`B1Sպmꦈ Ŗ6!p*⭭BYT֎؛Lj`JZ`Ɨn7<SunL (.=3 S>_e UNWEqe߭إ,K
f6 (x\ SLs;v 붨ܔ&ɑ{}|aCƙɋf c{% ڏSVevME_9c cXю^4,`Ujfٴ
` MMjmAzԒR,'z,= SGոq*oFp;CfcnLtIw\u*-V;G5vB*{o *Ծ4^lRv'}:Әu\Ҽ֯5NY֞7
G7krߘ ej_{5'.rQ7ZePg܄w\wqk瀟ZrUn #"Kn,S[qh L湧YqJs)z<lۦ,mNK}lwN]hBvx`N[_Ư,U^=*o&O-b7
[8JW~L&r$Wxˍ>V=] 綕<,OEs{ ^ŊT˖^FNla?j*wO{ޯ5A_)=}~kP{䩎7/|Njh7 5ɟ/^]ƃl\friY'yFzfz fzy7K~-ww|8]'E|0րVj*X3*7zS {wp&w)~Ҁ^ v~;~+xgaGygyB*H`,8@XBfQ wF w3NrPq3UHo?THw;>>x0.b~~(Qw@ @Ї~8Xx؇:sNE
PA8XXv> 7qexhGup?؊8MaՆw{phuǃRS#4XS mNj̸}-}2'`ȌRTw^u$1 x蘎4 ;s $Xx3W$(8'sɌԃ}ɐA(%C\?
ّ = Y# ((iP- <*y,s6:3)5$Ń>Y=AI=@YcӓHY;Gٔo(pXZ\ٕ^`bL?/I
jj Ch8tl0f)`=lٗ~y(yϘ( xAg9=PD х q` ԘɆD99al 9H89$z IكGјٛx
peg¹QRI@yp݉Yٜ9T'I)_#Y9y<( a驄)tF*fB܉ j
թjI942:+j-J ڟ莱96ŝ+o*@ ʠA٢Q*ˁU 1 Y WZ\YbS
byx4
"*Yy[JQ:^dʥyʧ`{Z{Z}٦6ʞJzOZwʧVPڧ*
uj)x>
wh9v
ʩRJj٨{ѥaMʣzԊ*yF:HeZa1`Aqʤ餗z:bjŊJfJD3
5jZBaK;躪rt*>;[ʦ 릇
JX꧘f
a
#ذ_'+:2K3K; [@j2-[[*ӺຳzAq*K 6۵ӊYkPKjS{,
/*;U W[۴
J+ZckpyhBzYڏJ;8ڴzOkQ۳A x$mKI:$qۮ$ {ٯ:dˬZ N[Z ۹)ɳ{:kJl++o[ϋr˵I.k:> ƫ۾ۣዳt Aʷ:ۺ˼kޫ+ j<;Ek[˞|#{SjTҋ [b k\ :¼꽤+uL z lB۠D gʼ+Y+XÇ <@\)}R35V<RVzz;Fli7\6l;a+.\sƶ;˿ՋijKd 9& ;ȶkʉb8L¨J~u <:͊|T
ɽ\Žk 3+J =f%,˴QZ|IL ʢhƸj_̓?7ܸ̻qk|p|KϺ, , [ܼb *SI" Ą̰\<L= M X̵ <jډy м)=d.G< Ʌi 9=Դ|D,/=BOݝHMJ=: F<MQ,= 8d-
>m1ՅT 0<X 4<ն|M𗈝mLP t=h W0;p؊}YDh l0}ڨڨ+j5<ڨٹ5 (`! % iM۵Y1r)=?2z^۰} }ޑ- ]mYL ]]9(mem- CyƹM
N]ࢽ
>fO ~iM!'*,Nc 92>#mP
@6{eA2b 9@c҆w `0 ]@ pXZ,v ]0 x@ Vlb@ K
I
<@9~^1@9< M0
PA&`
|P p $:0 O ^P>jp$ ` AN~ = >n^:(0 J! X~oC:pj힠 Ҟ?_
sDN9
5P
.m />0D f0_: !_3
Lpb 5P 6sVs0 `v B?Eo>JA*0KV/D[ 4n$W ` faj/l?S @
͞w_:}?LFPQ` HauOO2P\
nz}m
-O O
N2q gaF
F g ܟ Oп F
WGk .q 4xp .LQD-^ĘQF =~ yUC*<fCTD!Ä; B QA=0ЏM>iȑn<re2i@<
4[YKV\uiWqeWa%(Si 9҆''YfbQԤ
7oJ8ao!\6دx-g}[ @KG=2j5Gܖn#N67ƿG^e媭`Pœ'N,rel7$.ȋFD[Rܘ
l)0C
7FJc2*L`
W:1Fg$DeJxE$H>a=`PH+r.Ll o
SС'KBJ*D3M57J :(R &5Oި<n3 &3QEմ
;tQI'ҕ+z@RM7SO?5TQ{ ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding the AD LDS Schema</maml:title><maml:introduction>
<maml:para>An Active Directory Lightweight Directory Services (AD LDS) schema defines, using object classes and attributes, the types of objects and data that can be created and stored in an AD LDS directory. Each AD LDS configuration set has its own independently manageable schema, which is stored in the schema directory partition. In keeping with the AD LDS design concepts of simplicity and flexibility, the base (or default) AD LDS schema contains only the classes and attributes that are needed to start an AD LDS instance. The schema can be extended with new classes and attributes, either by administrators or by the applications themselves. In addition, unneeded schema classes and attributes can be deactivated. As with all objects in the directory, access control lists (ACLs) protect schema objects, so that only authorized users can alter the schema. Every object in an AD LDS directory is an instance of an object class that is defined in a schema, as shown in the following illustration.</maml:para>
<maml:para><maml:embedObject><maml:objectUri href="mshelp://windows/?id=2ef24662-abcf-4d3a-b2fb-8fb71fe9494e" mimeType="image/gif"><maml:summary>AD LDS schema</maml:summary></maml:objectUri></maml:embedObject></maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Object classes</maml:title><maml:introduction>
<maml:para>An object class represents a category of objects, such as users, printers, or application programs, that share a set of common characteristics. The definition for each object class contains a list of the attributes that can be used to describe instances of the class. For example, the <maml:phrase>User</maml:phrase> class has attributes such as <maml:phrase>givenName</maml:phrase>, <maml:phrase>surname</maml:phrase>, and <maml:phrase>streetAddress</maml:phrase>. The list of attributes for a class is divided into those attributes that an object of that class <maml:foreignPhrase>must</maml:foreignPhrase> contain and additional attributes that an object <maml:foreignPhrase>may</maml:foreignPhrase> contain. The definition of each class also lists the classes whose objects can be parents of objects of a given class.</maml:para>
<maml:para>For example, the following table shows the definition for the AD LDS <maml:phrase>User</maml:phrase> class.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Attribute</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Value</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Dn</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=User,CN=Schema,CN=Configuration</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectClass</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>top; classSchema;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>cn</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>User;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>distinguishedName</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=User,CN=Schema,CN=Configuration;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>subClassOf</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>organizationalPerson;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>mayContain</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>audio; carLicense; departmentNumber; displayName; employeeNumber; employeeType; givenName; homePostalAddress; jpegPhoto; labeledURI; photo; preferredLanguage; roomNumber; secretary; uid; userPKCS12; userSMIMECertificate; x500uniqueIdentifier;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>rDNAttID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>cn;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>adminDisplayName</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>User;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>adminDescription</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>User;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectClassCategory</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>1;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>lDAPDisplayName</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>user;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>name</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>User;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectGUID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>dac9093a-d2aa-408a-81bb-0fe8179165da;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>schemaIDGUID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>bf967aba-0de6-11d0-a285-00aa003049e2;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectCategory</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=Class-Schema,CN=Schema,CN=Configuration;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>defaultObjectCategory</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=Person,CN=Schema,CN=Configuration;</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Attributes</maml:title><maml:introduction>
<maml:para>The schema also defines each attribute. The definition for each attribute includes unique identifiers for the attribute, the syntax for the attribute, optional range limits for the attribute values, whether the attribute can have only one value or multiple values, and whether the attribute is indexed. The directory schema defines each attribute exactly once. Each attribute can then be referenced by multiple object classes. For example, the <maml:phrase>description</maml:phrase> attribute is defined once and then referenced by many object classes.</maml:para>
<maml:para>The following table shows the attribute definition for <maml:phrase>telephone number</maml:phrase>, a representative schema attribute.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Attribute</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Value</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectClass</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>top; attributeSchema;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>cn</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Telephone-Number;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>distinguishedName</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=Telephone-Number,CN=Schema,CN=Configuration;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>instanceType</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>0x4 = ( IT_WRITE );</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>whenCreated</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>11/12/2002 13</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>22</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>14 Pacific Standard Time Pacific Daylight Time;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>whenChanged</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>11/12/2002 13</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>22</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>14 Pacific Standard Time Pacific Daylight Time;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>uSNCreated</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>217;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>attributeID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>2.5.4.20;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>attributeSyntax</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>2.5.5.12;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>isSingleValued</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>TRUE;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>rangeLower</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>1;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>rangeUpper</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>64;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>uSNChanged</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>217;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>showInAdvancedViewOnly</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>TRUE;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>adminDisplayName</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Telephone-Number;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>adminDescription</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Telephone-Number;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>oMSyntax</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>64;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>searchFlags</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>0;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>lDAPDisplayName</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>telephoneNumber;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>name</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Telephone-Number;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectGUID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>bf19d7eb-ea0f-4f2d-af67-f439a037d8a4;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>schemaIDGUID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>bf967a49-0de6-11d0-a285-00aa003049e2;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>attributeSecurityGUID</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>77b5b886-944a-11d1-aebd-0000f80367c1;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>systemOnly</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>FALSE;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>systemFlags</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>0x10 = ( FLAG_SCHEMA_BASE_OBJECT );</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>isMemberOfPartialAttributeSet</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>TRUE;</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>objectCategory</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>CN=Attribute-Schema,CN=Schema,CN=Configuration;</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Single-valued and multivalued attributes</maml:title><maml:introduction>
<maml:para>Attributes can be single-valued or multivalued. An instance of a single-valued attribute can contain only a single value. An instance of a multivalued attribute can contain multiple values that must all use the same syntax. Each value of a multivalued attribute must be unique.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>A multivalued attribute stores its values in random order. Therefore, you should not make any directory decisions—programmatic or manual—based on the order of the values in a multivalued attribute.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Indexed attributes</maml:title><maml:introduction>
<maml:para>Indexing attributes helps to improve the performance of queries that are based on the indexed attribute. Both single-valued and multivalued attributes can be indexed; classes cannot be indexed. Attributes can be marked for indexing through their schema definition. Indexing an attribute also makes it possible for users to use wildcards (*) as prefixes and suffixes when they specify a search string. When you mark an attribute as indexed, all instances of the attribute are added to the index, not just the instances that are members of a particular class. Indexing attributes, particularly multivalued attributes, can negatively affect replication and object creation time, as well as directory database size. Therefore, you should index only commonly used attributes.</maml:para>
<maml:para>For general information about schemas, see Active Directory Schema (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=80809</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=80809"></maml:uri></maml:navigationLink>). </maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import Data into an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=1d2ea13e-3698-459a-af3b-be41255715aa"></maml:uri></maml:navigationLink> </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Import LDIF Files</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Import LDIF Files</maml:ui> page, you can specify that optional LDAP Data Interchange Format (LDIF) files be imported. Together, these files contain several user class schema definitions—along with objects for use with Windows Authorization Manager—that can be imported into the schema of the new instance of Active Directory Lightweight Directory Services (AD LDS) that is currently being installed.</maml:para>
<maml:para>The following table describes each of the optional .ldf files.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>.LDF file</maml:para>
</maml:entry>
<maml:entry>
<maml:para>User classes</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Import this file if ...</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>MS-ADAM-DisplaySpecifiers-0409.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Not applicable</maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to use an Active Directory Microsoft Management Console (MMC) snap-in (such as Active Directory Sites and Services) with AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-AdamSyncMetadata.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Not applicable</maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to use the <maml:computerOutputInline>adamsync</maml:computerOutputInline> command-line tool to synchronize AD LDS with Active Directory Domain Services (AD DS).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-AZMan.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Not applicable</maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to use Windows Authorization Manager with AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-InetOrgPerson.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Organizational-Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>User</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>inetOrgPerson</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create user objects in the AD LDS directory, and you want to create users of the <maml:phrase>InetOrgPerson</maml:phrase> class (as defined in RFC 2798). MS-InetOrgPerson.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-User.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Organizational-Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>User</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create user objects in the AD LDS directory, but you do not want to create users of the <maml:phrase>InetOrgPerson</maml:phrase> class (as defined in RFC 2798). MS-User.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-UserProxy.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>User-Proxy</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create simple proxy objects in AD LDS for use in bind redirection. MS-UserProxy.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-UserProxyFull.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>User-Proxy-Full</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create complete proxy objects in AD LDS for use in bind redirection. To use this file, you must also import MS-InetOrgPerson.LDF or MS-User.LDF. MS-UserProxyFull.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>If you choose not to import these LDIF files during setup, you can import them at a later time using the <maml:phrase>ldifde</maml:phrase> command-line tool. </maml:alert><maml:alert>This wizard page appears only during the installation of a unique AD LDS instance and not during the installation of a replica AD LDS instance.</maml:alert><maml:alert>You must be logged on as an account that is specified as the AD LDS administrator to import these schema class definitions into the AD LDS schema.</maml:alert></maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Install an AD LDS Replica from Media</maml:title><maml:introduction>
<maml:para>When you install an Active Directory Lightweight Directory Services (AD LDS) replica from media, you use a restored backup of an AD LDS instance as the data source, rather than another AD LDS instance.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To install an AD LDS replica from media</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Restore a backup copy of the AD LDS instance from which you want to install to an alternate location. (Do not restore the backup to the original location of the AD LDS instance.)</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At a command prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>%windir%\adam\adaminstall /adv</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the steps in the Active Directory Lightweight Directory Services Setup Wizard.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can install an AD LDS replica only from media that is created by restoring a backup copy of an AD LDS instance. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you restore an AD LDS instance for use in a replica installation from media, you must restore the files to an alternate location, rather than to the original location from which they were backed up.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you restore AD LDS files from a backup to an alternate location, the Adamntds.dit file and Edb*.log files will be nested in the specified alternate location. For example, if you specify C:\restore_dir as the restore location for the AD LDS files, Adamntds.dit and the Edb*.log files will be located at C:\restore_dir\Program Files\Microsoft ADAM\<maml:replaceable>instancename</maml:replaceable>\data, where <maml:replaceable>instancename</maml:replaceable> represents the AD LDS instance that was restored.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Back Up AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=ed463518-ce97-4eb5-89b9-ec4d958edb53"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restore AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding AD LDS Instance Backup and Restore</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Backing up and restoring AD LDS</maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) data and log files should be backed up regularly to ensure the continued availability of data to applications and users in the event of a system failure.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Backing up AD LDS</maml:title><maml:introduction>
<maml:para>By default, each instance of AD LDS running on an AD LDS server stores its database file, Adamntds.dit, and the associated log files in %program files%\Microsoft adam\<maml:replaceable>instancename</maml:replaceable>\data. These files should be included as part of the regular backup plan of your organization. You can back up the directory stores using Windows Server Backup or any Windows Logo Program, third-party backup utility. For information about backing up an AD LDS instance, see <maml:navigationLink><maml:linkText>Back Up AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=ed463518-ce97-4eb5-89b9-ec4d958edb53"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Restoring AD LDS</maml:title><maml:introduction>
<maml:para>When you restore a database to an existing AD LDS instance, you must stop the AD LDS instance before you run the restore operation. In addition, we recommend that you move (or delete) the existing database and log files from the AD LDS instance before the restore operation.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Authoritative restore</maml:title><maml:introduction>
<maml:para>If objects in the directory are inadvertently deleted or modified, and if those objects are replicated in a configuration set, you must authoritatively restore those objects so that the correct version of the objects is replicated. To authoritatively restore directory data, run the <maml:computerOutputInline>dsdbutil</maml:computerOutputInline> utility after you restore the data but before you restart the AD LDS instance. With <maml:computerOutputInline>dsdbutil</maml:computerOutputInline>, you can mark directory objects for authoritative restore. When an object is marked for authoritative restore, its update sequence number is changed so that the number is higher than any other update sequence number in the configuration set. This ensures that any data you restore is properly replicated throughout the configuration set.</maml:para>
<maml:para>For more information about restoring an AD LDS instance, including authoritative restores, see <maml:navigationLink><maml:linkText>Restore AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>If you restore an AD LDS backup over a running AD LDS instance, Windows Server Backup leaves the restored files in a pending state, and it does not write the files to disk until the computer is rebooted. In this situation, any directory changes that are made to the running AD LDS instance after Windows Server Backup is run are lost.</maml:para>
<maml:para>If you accidentally start a restore of an AD LDS instance over a currently running AD LDS instance, we recommend that you immediately restart the computer, stop the AD LDS instance, and then perform the restoration again.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Ports</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Ports</maml:ui> page, you specify the communications ports that the Active Directory Lightweight Directory Services (AD LDS) instance will use to communicate with directory-enabled applications. Directory-enabled applications locate an AD LDS instance by using a combination of the name of the computer on which the AD LDS instance is running and a communication port number. An AD LDS instance can communicate using Lightweight Directory Access Protocol (LDAP) or Secure Sockets Layer (SSL). You must provide a port number for each.</maml:para>
<maml:para>If you are not sure what communication port numbers to use, accept the default values.</maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>By default, AD LDS uses the default communication port numbers of 389 and 636 for LDAP and SSL, respectively. If either of these ports is already in use on the computer, AD LDS specifies the first available port starting at 50000.</maml:alert><maml:alert>If you plan to run AD LDS and Active Directory Domain Services (AD DS) concurrently on the same computer, you must assign ports other than 389 and 636 to AD LDS. AD DS requires the use of ports 389 and 636 (as well as ports 3268 and 3269 if the domain controller running AD DS is configured as a global catalog).</maml:alert></maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Csvde</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Csvde</maml:title><maml:introduction>
<maml:para>Imports and exports data from Active Directory Lightweight Directory Services (AD LDS) using files that store data in the comma-separated value (CSV) format. You can also support batch operations based on the CSV file format standard. </maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Syntax</maml:title><maml:introduction>
<maml:para><maml:computerOutputInline>csvde</maml:computerOutputInline> [<maml:computerOutputInline>-i</maml:computerOutputInline>] [<maml:computerOutputInline>-f</maml:computerOutputInline> <maml:replaceable>FileName</maml:replaceable>] [<maml:computerOutputInline>-s</maml:computerOutputInline> <maml:replaceable>ServerName</maml:replaceable>] [<maml:computerOutputInline>-c</maml:computerOutputInline> <maml:replaceable>String1 String2</maml:replaceable>] [<maml:computerOutputInline>-v</maml:computerOutputInline>] [<maml:computerOutputInline>-j</maml:computerOutputInline> <maml:replaceable>Path</maml:replaceable>] [<maml:computerOutputInline>-t</maml:computerOutputInline> <maml:replaceable>PortNumber</maml:replaceable>] [<maml:computerOutputInline>-d</maml:computerOutputInline> <maml:replaceable>BaseDN</maml:replaceable>] [<maml:computerOutputInline>-r</maml:computerOutputInline> <maml:replaceable>LDAPFilter</maml:replaceable>] [<maml:computerOutputInline>-p</maml:computerOutputInline> <maml:replaceable>Scope</maml:replaceable>] [<maml:computerOutputInline>-l</maml:computerOutputInline> <maml:replaceable>LDAPAttributeList</maml:replaceable>] [<maml:computerOutputInline>-o</maml:computerOutputInline> <maml:replaceable>LDAPAttributeList</maml:replaceable>] [<maml:computerOutputInline>-g</maml:computerOutputInline>] [<maml:computerOutputInline>-m</maml:computerOutputInline>] [<maml:computerOutputInline>-n</maml:computerOutputInline>] [<maml:computerOutputInline>-k</maml:computerOutputInline>] [<maml:computerOutputInline>-a</maml:computerOutputInline> <maml:replaceable>UserDistinguishedName Password</maml:replaceable>] [<maml:computerOutputInline>-b</maml:computerOutputInline> <maml:replaceable>UserName Domain Password</maml:replaceable>]</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Parameters</maml:title><maml:introduction>
<maml:definitionList><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-i</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Specifies the import mode. If the import mode is not specified, the default mode is export.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-f</maml:computerOutputInline> FileName</maml:term><maml:definition>
<maml:para>Identifies the import or export file name.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-s</maml:computerOutputInline> ServerName</maml:term><maml:definition>
<maml:para>Specifies the domain controller to perform the import or export operation.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-c</maml:computerOutputInline> String1 String2</maml:term><maml:definition>
<maml:para>Replaces all occurrences of <maml:replaceable>String1</maml:replaceable> with <maml:replaceable>String2</maml:replaceable>. You generally use this when you importing from one domain to another and the distinguished name of the export domain (<maml:replaceable>String1</maml:replaceable>) must be replaced with the distinguished name of the import domain (<maml:replaceable>String2</maml:replaceable>).</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-v</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Sets verbose mode.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-j</maml:computerOutputInline> Path</maml:term><maml:definition>
<maml:para>Sets the log file location. The default is the current path.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-t</maml:computerOutputInline> PortNumber</maml:term><maml:definition>
<maml:para>Specifies a Lightweight Directory Access Protocol (LDAP) port number. The default LDAP port is 389. The global catalog port is 3268.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-d</maml:computerOutputInline> BaseDN</maml:term><maml:definition>
<maml:para>Sets the distinguished name of the search base for data export.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-r</maml:computerOutputInline> LDAPFilter</maml:term><maml:definition>
<maml:para>Creates an LDAP search filter for data export. </maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-p</maml:computerOutputInline> Scope</maml:term><maml:definition>
<maml:para>Sets the search scope. Search scope options are <maml:computerOutputInline>Base</maml:computerOutputInline>, <maml:computerOutputInline>OneLevel</maml:computerOutputInline>, or <maml:computerOutputInline>SubTree</maml:computerOutputInline>.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-l</maml:computerOutputInline> LDAPAttributeList</maml:term><maml:definition>
<maml:para>Sets the list of attributes to appear in the results of an export query. If this parameter is omitted, all attributes are returned. </maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-o</maml:computerOutputInline> LDAPAttributeList</maml:term><maml:definition>
<maml:para>Sets the list of attributes to be omitted from the results of an export query. You typically use this when you export objects from Active Directory Domain Services (AD DS) and then import them into another LDAP-compliant directory. If the attributes are not supported by another directory, you can omit the attributes from the result set using this option. </maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-g</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Omits paged searches.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-m</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Omits attributes that cannot be written, such as the <maml:phrase>ObjectGUID</maml:phrase> and <maml:phrase>objectSID</maml:phrase> attributes.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-n</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Omits export of binary values.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-k</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Ignores errors during the import operation, and continues processing. The following is a complete list of ignored errors: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Object already exists.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Constraint violation.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Attribute or value already exists.</maml:para>
</maml:listItem>
</maml:list>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-a</maml:computerOutputInline> UserDistinguishedName Password</maml:term><maml:definition>
<maml:para>Sets the command to run using the supplied <maml:replaceable>UserDistinguishedName</maml:replaceable> and <maml:replaceable>Password</maml:replaceable>. By default, the command runs using the credentials of the user who is currently logged on to the network. </maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-b</maml:computerOutputInline> UserName Domain Password</maml:term><maml:definition>
<maml:para>Sets the command to run as <maml:replaceable>UserName Domain Password</maml:replaceable>. By default, the command will run using the credentials of the user who is currently logged on to the network.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-?</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Displays the command menu.</maml:para>
</maml:definition></maml:definitionListItem></maml:definitionList>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Remarks</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Applications such as Microsoft Excel are capable of reading and saving data in the CSV format. In addition, Microsoft Exchange Server administration tools are also capable of importing and exporting data using the CSV format, as are many other non-Microsoft tools. </maml:para>
<maml:para>The CSV format consists of one or more lines of data, with each value separated by a comma. The first line (sometimes referred to as the header) of the CSV file must contain the names of each attribute in the same order as the data in any line following the first line. </maml:para>
<maml:para>Example:</maml:para>
<maml:para><maml:replaceable>CN</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>FirstName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>SurName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>Description</maml:replaceable></maml:para>
<maml:para><maml:replaceable>FirstUserLogonName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>1stUserFirstName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>1stUserSurName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>Manager</maml:replaceable></maml:para>
<maml:para><maml:replaceable>SecondUserLogonName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>2ndUserFirstName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>2ndUserSurName</maml:replaceable><maml:phrase>,</maml:phrase><maml:replaceable>President</maml:replaceable></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can use <maml:computerOutputInline>csvde -r </maml:computerOutputInline>to create an LDAP search filter for data export. For example, the following filter exports all users with a particular surname: </maml:para>
<maml:para><maml:computerOutputInline>csvde -r (and(objectClass=</maml:computerOutputInline><maml:replaceable>User</maml:replaceable><maml:computerOutputInline>)(sn</maml:computerOutputInline><maml:phrase>=</maml:phrase><maml:replaceable>SurName</maml:replaceable><maml:computerOutputInline>))</maml:computerOutputInline></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Formatting legend</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Format</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Meaning</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>Italic</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Information that you supply </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>Bold</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Elements that you type exactly as shown </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Ellipsis (...)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>A parameter that can be repeated several times in a command line </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Between brackets ([])</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Optional items </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Between braces ({}); choices separated by pipe (|). Example: {even|odd} </maml:para>
</maml:entry>
<maml:entry>
<maml:para>A set of choices from which you must choose only one </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Courier font</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Code or program output</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administration Tools</maml:linkText><maml:uri href="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Administering Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=ab5c668e-f30d-4e72-a0be-56066522d9e5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Create an Application Directory Partition</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>Each instance of Active Directory Lightweight Directory Services (AD LDS) can contain one or more application directory partitions to hold application data. All application directory partitions in an AD LDS directory instance share a single schema that defines the objects and attributes that can be stored in the directory. When you create an application directory, you can create a new, empty application partition, or you can replicate one or more application directory partitions from an existing AD LDS instance.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS application directory partitions.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Create an application directory partition.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Create an Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=f43b2a3a-18ec-4f24-84d6-90df5a93c750"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Import the User Classes That Are Supplied with AD LDS</maml:title><maml:introduction>
<maml:para>To create users in Active Directory Lightweight Directory Services (AD LDS), you must first import the optional user classes that are supplied with AD LDS into the AD LDS schema. These user classes are provided in importable .ldf files, which you can find in the directory %windir%\adam on the computer where AD LDS is installed.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To import the user classes that are supplied with AD LDS</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the command prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>ldifde -i -f %windir%\adam\</maml:computerOutputInline><maml:replaceable>filename</maml:replaceable> <maml:computerOutputInline>-s</maml:computerOutputInline> <maml:replaceable>computername</maml:replaceable><maml:computerOutputInline>:</maml:computerOutputInline><maml:replaceable>port</maml:replaceable> <maml:computerOutputInline>[-b</maml:computerOutputInline> <maml:replaceable>username</maml:replaceable> <maml:replaceable>domain</maml:replaceable> <maml:replaceable>password</maml:replaceable>] <maml:computerOutputInline>-k -j . -c "CN=Schema,CN=Configuration,DC=X" #schemaNamingContext</maml:computerOutputInline></maml:para>
<maml:para>where <maml:replaceable>filename</maml:replaceable> represents the name of one of the .ldf files that is supplied with AD LDS, <maml:replaceable>computername</maml:replaceable>:<maml:replaceable>port</maml:replaceable> represents the computer name and port number of an AD LDS instance, and <maml:replaceable>username domain password</maml:replaceable> represents the account with which to run the command.</maml:para>
<maml:para>When you run this command, you should see results similar to the following:</maml:para>
<dev:code>
Connecting to "localhost"
Logging in as current user using SSPI
Importing directory from file "ms-user.ldf"
Loading entries................................
65 entries modified successfully.
The command has completed successfully</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-i</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs an import.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-f</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the file to import or export.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-s</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the host name and port of the AD LDS instance.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-b</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the security credentials to use during the operation.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-k</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Continues the operation in the event of errors.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-j</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Creates a log file in the specified directory, in this case, the current ("<maml:phrase>.</maml:phrase>") directory.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>-c "CN=Schema,CN=Configuration,DC=X" #schemaNamingContext</maml:phrase></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Do not modify this string. </maml:para>
<maml:para>The <maml:phrase>-c</maml:phrase> parameter replaces a specified string in the .ldf file with a different string during import. The distinguished name that is specified in the .ldf file (for example, <maml:phrase>CN=Schema,CN=Configuration,DC=X</maml:phrase>) is replaced with the distinguished name of the schema directory partition for your particular AD LDS instance, as passed by the <maml:phrase>#schemaNamingContext</maml:phrase> constant.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Replace ...</maml:para>
</maml:entry>
<maml:entry>
<maml:para>With ...</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>computername</maml:replaceable>:<maml:replaceable>port</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The host name and port number of your AD LDS instance. You can use <maml:computerOutputInline>localhost</maml:computerOutputInline> for <maml:replaceable>computername</maml:replaceable> if you are administering the local computer.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>username domain password</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The account, domain, and password of an account that is being used as an AD LDS administrator account.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>ldifde /?</maml:computerOutputInline></maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>AD LDS includes the following .ldf files containing user classes that you can import. These files are located in the %windir%\adam directory.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>.ldf file</maml:para>
</maml:entry>
<maml:entry>
<maml:para>User classes</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Import this file if ...</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>MS-ADAM-DisplaySpecifiers-0409.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Not applicable</maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to use an Active Directory snap-in (such as Active Directory Sites and Services) with AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-AdamSyncMetadata.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Not applicable</maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to use <maml:computerOutputInline>adamsync</maml:computerOutputInline> to synchronize AD LDS with Active Directory Domain Services (AD DS).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-AZMan.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Not applicable</maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to use Windows Authorization Manager with AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-InetOrgPerson.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Organizational-Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>User</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>inetOrgPerson</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create user objects in the AD LDS directory, and you want to create users of the <maml:phrase>InetOrgPerson</maml:phrase> class (as defined in RFC 2798). MS-InetOrgPerson.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-User.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Organizational-Person</maml:phrase></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>User</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create user objects in the AD LDS directory, but you do not want to create users of the <maml:phrase>InetOrgPerson</maml:phrase> class (as defined in RFC 2798). MS-User.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-UserProxy.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>User-Proxy</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create simple proxy objects in AD LDS for use in bind redirection. MS-UserProxy.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MS-UserProxyFull.LDF</maml:para>
</maml:entry>
<maml:entry>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>User-Proxy-Full</maml:phrase></maml:para>
</maml:listItem>
</maml:list>
</maml:entry>
<maml:entry>
<maml:para>You want to create complete proxy objects in AD LDS for use in bind redirection. To use this file, you must also import MS-InetOrgPerson.LDF or MS-User.LDF. MS-UserProxyFull.LDF is a sample file that you can modify to meet your particular requirements.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:listItem>
<maml:listItem>
<maml:para>As an alternative to using <maml:phrase>ldifde</maml:phrase>, you can import the optional AD LDS user classes during AD LDS setup. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you do not specify user credentials using the <maml:phrase>-b</maml:phrase> parameter, <maml:phrase>ldifde</maml:phrase> uses the credentials of the currently logged on user.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import LDIF Files</maml:linkText><maml:uri href="mshelp://windows/?id=5f662b35-c775-4b92-bc46-fd1ce4f33206"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ldifde</maml:linkText><maml:uri href="mshelp://windows/?id=8cccc00d-b452-4109-a1a5-60e1af3af95e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a Replica AD LDS Instance</maml:title><maml:introduction>
<maml:para>You use the Active Directory Lightweight Directory Services Setup Wizard to create Active Directory Lightweight Directory Services (AD LDS) service instances. In AD LDS, a "service instance" (or, simply, "instance") refers to a single running copy of AD LDS. To provide fault tolerance and load balancing, AD LDS instances can be part of a configuration set. All AD LDS instances in a configuration set replicate a common configuration directory partition and a common schema directory partition, plus any number of application directory partitions.</maml:para>
<maml:para>To create an AD LDS instance and join it to an existing configuration set, use the Active Directory Lightweight Directory Services Set Wizard to create a replica AD LDS instance. You need to know the Domain Name System (DNS) name of the server running an AD LDS instance that belongs to the configuration set, as well as the Lightweight Directory Access Protocol (LDAP) port that was specified when the instance was created. You can also supply the distinguished names (also known as DNs) of specific application directory partitions that you want to copy from the configuration set to the AD LDS instance that you are creating. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a replica AD LDS instance</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Lightweight Directory Services Setup Wizard</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Welcome to the Active Directory Lightweight Directory Services Setup Wizard</maml:ui> page, click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Setup Options</maml:ui> page, click <maml:ui>A replica of an existing instance</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Finish creating the new instance by following the wizard instructions.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Replication and Configuration Sets</maml:linkText><maml:uri href="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Import Data from LDIF Files</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>LDAP Data Interchange Format (LDIF) files provide a mechanism for importing schema definitions into an instance of Active Directory Lightweight Directory Services (AD LDS). You can use LDIF files to transfer objects between Active Directory Domain Services (AD DS) and AD LDS partitions. You can import one of several Microsoft-supplied LDIF files to create user objects or proxy objects. You can also create LDIF files containing object definitions that are exported from other Lightweight Directory Access Protocol (LDAP)–compliant directories.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS instances.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Read about the AD LDS schema.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Read about Ldifde.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Ldifde</maml:linkText><maml:uri href="mshelp://windows/?id=8cccc00d-b452-4109-a1a5-60e1af3af95e"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Copy the LDIF file that you want to import to the server.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Run Ldifde.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Import Data into an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=1d2ea13e-3698-459a-af3b-be41255715aa"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Ldifde</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Ldifde</maml:title><maml:introduction>
<maml:para>Creates, modifies, and deletes directory objects. You can also use <maml:computerOutputInline>ldifde</maml:computerOutputInline> to extend the schema, export user and group information to other applications or services, and populate Active Directory Lightweight Directory Services (AD LDS) with data from other directory services.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Syntax</maml:title><maml:introduction>
<maml:para><maml:computerOutputInline>ldifde</maml:computerOutputInline> [<maml:computerOutputInline>-i</maml:computerOutputInline>] [<maml:computerOutputInline>-f</maml:computerOutputInline> <maml:replaceable>FileName</maml:replaceable>] [<maml:computerOutputInline>-s</maml:computerOutputInline> <maml:replaceable>ServerName</maml:replaceable>] [<maml:computerOutputInline>-c</maml:computerOutputInline> <maml:replaceable>String1 String2</maml:replaceable>] [<maml:computerOutputInline>-v</maml:computerOutputInline>] [<maml:computerOutputInline>-j</maml:computerOutputInline> <maml:replaceable>Path</maml:replaceable>] [<maml:computerOutputInline>-t</maml:computerOutputInline> <maml:replaceable>PortNumber</maml:replaceable>] [<maml:computerOutputInline>-d</maml:computerOutputInline> <maml:replaceable>BaseDN</maml:replaceable>] [<maml:computerOutputInline>-r</maml:computerOutputInline> <maml:replaceable>LDAPFilter</maml:replaceable>] [<maml:computerOutputInline>-p</maml:computerOutputInline> <maml:replaceable>Scope</maml:replaceable>] [<maml:computerOutputInline>-l</maml:computerOutputInline> <maml:replaceable>LDAPAttributeList</maml:replaceable>] [<maml:computerOutputInline>-o</maml:computerOutputInline> <maml:replaceable>LDAPAttributeList</maml:replaceable>] [<maml:computerOutputInline>-g</maml:computerOutputInline>] [<maml:computerOutputInline>-m</maml:computerOutputInline>] [<maml:computerOutputInline>-n</maml:computerOutputInline>] [<maml:computerOutputInline>-k</maml:computerOutputInline>] [<maml:computerOutputInline>-a</maml:computerOutputInline> <maml:replaceable>UserDistinguishedName Password</maml:replaceable>] [<maml:computerOutputInline>-b</maml:computerOutputInline> <maml:replaceable>UserName Domain Password</maml:replaceable>] [<maml:computerOutputInline>-?</maml:computerOutputInline>] </maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Parameters</maml:title><maml:introduction>
<maml:definitionList><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-i</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Specifies import mode. If the import mode is not specified, the default mode is export.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-f</maml:computerOutputInline> FileName</maml:term><maml:definition>
<maml:para>Identifies the import or export file name.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-s</maml:computerOutputInline> ServerName</maml:term><maml:definition>
<maml:para>Specifies the computer on which to perform the import or export operation. By default, <maml:computerOutputInline>ldifde</maml:computerOutputInline> will run on the computer on which <maml:computerOutputInline>ldifde</maml:computerOutputInline> is installed.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-c</maml:computerOutputInline> String1 String2</maml:term><maml:definition>
<maml:para>Replaces all occurrences of <maml:replaceable>String1</maml:replaceable> with <maml:replaceable>String2</maml:replaceable>. You generally use this when you import data from one domain to another and the distinguished name of the export domain (<maml:replaceable>String1</maml:replaceable>) must be replaced with the distinguished name of the import domain (<maml:replaceable>String2</maml:replaceable>).</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-v</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Sets verbose mode.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-j</maml:computerOutputInline> Path</maml:term><maml:definition>
<maml:para>Sets the log file location. The default is the current path.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-t</maml:computerOutputInline> PortNumber</maml:term><maml:definition>
<maml:para>Specifies a Lightweight Directory Access Protocol (LDAP) port number. The default LDAP port is 389. The global catalog port is 3268.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-d</maml:computerOutputInline> BaseDN</maml:term><maml:definition>
<maml:para>Sets the distinguished name of the search base for data export.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-r</maml:computerOutputInline> LDAPFilter</maml:term><maml:definition>
<maml:para>Creates an LDAP search filter for data export. For example, to export all users with a particular surname, you can use the following filter: <maml:computerOutputInline>-r</maml:computerOutputInline> <maml:computerOutputInline>(and(objectClass=</maml:computerOutputInline><maml:replaceable>User</maml:replaceable><maml:computerOutputInline>)(sn=</maml:computerOutputInline><maml:replaceable>SurName</maml:replaceable><maml:computerOutputInline>))</maml:computerOutputInline></maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-p</maml:computerOutputInline> Scope</maml:term><maml:definition>
<maml:para>Sets the search scope. Search scope options are <maml:computerOutputInline>Base</maml:computerOutputInline>, <maml:computerOutputInline>OneLevel</maml:computerOutputInline>, or <maml:computerOutputInline>SubTree</maml:computerOutputInline>.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-l</maml:computerOutputInline> LDAPAttributeList</maml:term><maml:definition>
<maml:para>Sets the list of attributes to return in the results of an export query. If this parameter is omitted, all attributes are returned. </maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-o</maml:computerOutputInline> LDAPAttributeList </maml:term><maml:definition>
<maml:para>Sets the list of attributes to omit from the results of an export query. You typically use this when you export objects from Active Directory Domain Services (AD DS) and then import them into another LDAP-compliant directory. If attributes are not supported by another directory, you can omit the attributes from the result set using this option. </maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-g</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Omits paged searches.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-m</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Omits attributes that cannot be written, such as the <maml:phrase>ObjectGUID</maml:phrase> and <maml:phrase>objectSID</maml:phrase> attributes.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-n</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Omits export of binary values.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-k</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Ignores errors during the import operation, and continues processing. The following is a complete list of ignored errors:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Object is already a member of the group. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Object class violation (meaning that the specified object class does not exist) if the object being imported has no other attributes. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Object already exists. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Constraint violation. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Attribute or value already exists. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>No such object. </maml:para>
</maml:listItem>
</maml:list>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-a</maml:computerOutputInline> UserDistinguishedName Password</maml:term><maml:definition>
<maml:para>Sets the command to run using the supplied <maml:replaceable>UserDistinguishedName</maml:replaceable> and <maml:replaceable>Password</maml:replaceable>. By default, the command will run using the credentials of the user who is currently logged on to the network. This option cannot be used with the <maml:computerOutputInline>-b</maml:computerOutputInline> option.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-b</maml:computerOutputInline> UserName Domain Password</maml:term><maml:definition>
<maml:para>Sets the command to run using the supplied <maml:replaceable>UserName Domain Password</maml:replaceable>. By default, the command will run using the credentials of the user who is currently logged on to the network. This option cannot be used with the <maml:computerOutputInline>-a</maml:computerOutputInline> option.</maml:para>
</maml:definition></maml:definitionListItem><maml:definitionListItem><maml:term termClass="other"><maml:computerOutputInline>-?</maml:computerOutputInline></maml:term><maml:definition>
<maml:para>Displays the command menu.</maml:para>
</maml:definition></maml:definitionListItem></maml:definitionList>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Remarks</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>With the <maml:computerOutputInline>-c</maml:computerOutputInline> parameter, you can use the constants <maml:computerOutputInline>#schemaNamingContext</maml:computerOutputInline> and <maml:computerOutputInline>#configurationNamingContext</maml:computerOutputInline> in place of the distinguished names of the schema directory partition and configuration directory partition.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you create the import file to use with the <maml:computerOutputInline>ldifde</maml:computerOutputInline> command, use a <maml:computerOutputInline>changeType</maml:computerOutputInline> value to define the type of changes that the import file will contain. The <maml:computerOutputInline>changeType</maml:computerOutputInline> values in the following table are available. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Value</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>add</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that new content is contained in the import file.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>modify</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that existing content has been modified in the import file.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>delete</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that content has been deleted in the import file.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:listItem>
</maml:list>
<maml:para>The following is an example of an LDAP Data Interchange Format (LDIF) import file format using the <maml:computerOutputInline>add</maml:computerOutputInline> value:</maml:para>
<maml:para><maml:computerOutputInline>DN:</maml:computerOutputInline> <maml:computerOutputInline>CN=</maml:computerOutputInline><maml:replaceable>SampleUser</maml:replaceable><maml:computerOutputInline>,DC</maml:computerOutputInline><maml:phrase>=</maml:phrase><maml:replaceable>DomainName</maml:replaceable></maml:para>
<maml:para><maml:computerOutputInline>changetype:</maml:computerOutputInline> <maml:computerOutputInline>add</maml:computerOutputInline></maml:para>
<maml:para><maml:computerOutputInline>CN:</maml:computerOutputInline> <maml:replaceable>SampleUser</maml:replaceable></maml:para>
<maml:para><maml:computerOutputInline>description:</maml:computerOutputInline> <maml:replaceable>DescriptionOfFile</maml:replaceable></maml:para>
<maml:para><maml:computerOutputInline>objectClass:</maml:computerOutputInline> <maml:replaceable>User</maml:replaceable></maml:para>
<maml:para><maml:computerOutputInline>userPrincipalName:</maml:computerOutputInline> <maml:replaceable>SampleUser</maml:replaceable></maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Examples</maml:title><maml:introduction>
<maml:para>To retrieve only the distinguished name, common name, first name, surname, and telephone number of the returned objects, type: </maml:para>
<maml:para><maml:computerOutputInline>-l</maml:computerOutputInline> <maml:replaceable>DistinguishedName</maml:replaceable><maml:computerOutputInline>,</maml:computerOutputInline> <maml:computerOutputInline>CN,</maml:computerOutputInline> <maml:replaceable>GivenName</maml:replaceable><maml:computerOutputInline>,</maml:computerOutputInline> <maml:computerOutputInline>SN,</maml:computerOutputInline> <maml:replaceable>Telephone</maml:replaceable></maml:para>
<maml:para>To omit the globally unique identifier (GUID) for an object, type:</maml:para>
<maml:para><maml:computerOutputInline>-o</maml:computerOutputInline> <maml:replaceable>whenCreated</maml:replaceable><maml:phrase>,</maml:phrase> <maml:replaceable>whenChanged</maml:replaceable><maml:phrase>,</maml:phrase> <maml:replaceable>objectGUID</maml:replaceable></maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Formatting legend</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Format</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Meaning</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable>Italic</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Information that you supply </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>Bold</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Elements that you type exactly as shown </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Ellipsis (...)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>A parameter that can be repeated several times in a command line </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Between brackets ([])</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Optional items </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Between braces ({}); choices separated by pipe (|). Example: {even|odd} </maml:para>
</maml:entry>
<maml:entry>
<maml:para>A set of choices from which you must choose only one </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Courier font</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Code or program output</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administration Tools</maml:linkText><maml:uri href="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import Data into an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=1d2ea13e-3698-459a-af3b-be41255715aa"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Administering Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=ab5c668e-f30d-4e72-a0be-56066522d9e5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>ADSI Edit</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>ADSI Edit</maml:title><maml:introduction>
<maml:para>ADSI Edit runs as a Microsoft Management Console (MMC) snap-in. To open ADSI Edit, on a computer with the Active Directory Lightweight Directory Services (AD LDS) server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>. </maml:para>
<maml:para>The following sections describe user interface (UI) options in the ADSI Edit snap-in, depending on the node that you click in the console tree or the command that you click the <maml:ui>Action</maml:ui> menu: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>ADSI Edit node</maml:linkText><maml:uri href="mshelp://windows/?id=95fd3ac1-6fa7-4640-bca9-8651fb968e29#BKMK_edit"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Connection node</maml:linkText><maml:uri href="mshelp://windows/?id=95fd3ac1-6fa7-4640-bca9-8651fb968e29#BKMK_connection"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Object node</maml:linkText><maml:uri href="mshelp://windows/?id=95fd3ac1-6fa7-4640-bca9-8651fb968e29#BKMK_object"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_edit">
<maml:title>ADSI Edit node</maml:title><maml:introduction>
<maml:para>To view the following UI options, in the console tree, click <maml:ui>ADSI Edit</maml:ui>, and then, on the <maml:ui>Action</maml:ui> menu, click <maml:ui>Connect to</maml:ui>. The <maml:ui>Connection Settings</maml:ui> dialog box appears</maml:para>
<maml:para>You can use the following options in the <maml:ui>Connection Settings</maml:ui> dialog box to create a connection to a directory partition on an instance of Active Directory Lightweight Directory Services (AD LDS). </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type a display name for the connection. The connection will be listed in the console tree using the connection name that you provide.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Connection Point</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specify how you want to connect to the AD LDS instance. You can connect to a distinguished name or naming context in the AD LDS instance, or you can select a well-known naming context.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>AD LDS does not provide a naming context by default.</maml:para>
</maml:alertSet>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Computer</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specify the computer running the AD LDS instance that you want to administer. You must specify the server name or IP address. If the AD LDS instance is not using the default Lightweight Directory Access Protocol (LDAP) communications port number (389), you must also specify the port number that the AD LDS instance is using.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Advanced</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Click this button to specify the credentials and bind method that you want to use for connections to the AD LDS instance</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>The <maml:ui>Refresh</maml:ui> command on the <maml:ui>Action</maml:ui> menu updates the information about connections and objects that is displayed in ADSI Edit.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_connection">
<maml:title>Connection node</maml:title><maml:introduction>
<maml:para>To view the following commands, in the console tree, click a connection node for an already established connection, and then, on the <maml:ui>Action</maml:ui> menu, click one of the commands in the following table. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Command</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Remove</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Removes the currently selected connection node from ADSI Edit. This command affects only the contents of the ADSI Edit console tree; the command does not delete any objects from the AD LDS instance.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Update Schema Now</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reloads the schema information from AD LDS into the cache of the local computer.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>New</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Creates a new query when you point to <maml:ui>New</maml:ui> and then click <maml:ui>Query</maml:ui>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Rename</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies a new name for the connection node.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Refresh</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Updates the information about connections and objects that is displayed in ADSI Edit.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section address="BKMK_object">
<maml:title>Object node</maml:title><maml:introduction>
<maml:para>To view the following commands, in the console tree, click a directory object in a directory partition in an AD LDS instance, and then, on the <maml:ui>Action</maml:ui> menu, click one of the commands in the following table.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Command</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Move</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Moves the object to another container in AD LDS. Opens a dialog box that you can use to select the destination container.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>New Connection from Here</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Creates a new connection and adds the new connection to the console tree.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>New</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Creates a new child object in the selected container when you point to <maml:ui>New</maml:ui> and then click <maml:ui>Object</maml:ui>. Opens a set of chained dialog boxes that begins with the class of the object. If you do not have permission to create an object in the selected container, no classes are listed. After a class is selected, a dialog box opens for each required attribute. In the final dialog box, click <maml:ui>More</maml:ui> to view and edit any optional attributes.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Delete</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Deletes the selected object from AD LDS. A dialog box appears asking you to confirm the deletion. This command does not appear in the menu if you do not have permissions to delete the object from AD LDS. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Rename</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Changes the name of the object in AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Refresh</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Updates the information that is displayed in ADSI Edit about connections and objects.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Properties</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box in which you can edit the attribute values of an object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Reset Password</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>This option is available only for objects that contain a <maml:ui>unicodePwd</maml:ui> attribute. This option provides a dialog box in which the value of the <maml:ui>unicodePwd</maml:ui> attribute can be reset.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administration Tools</maml:linkText><maml:uri href="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ldp</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Set or Modify the Password of an AD LDS User</maml:title><maml:introduction>
<maml:para>You can set and modify passwords for Active Directory Lightweight Directory Services (AD LDS) security principals over Secure Sockets Layer (SSL) connections (using Ldp.exe) or over encrypted, non-SSL connections (using ADSI Edit or Ldp.exe). To establish an SSL connection to AD LDS, you must install certificates on the computer running AD LDS and on all the clients. To make SSL connections to an AD LDS instance, you must use Ldp.exe; ADSI Edit does not support SSL connections. </maml:para>
<maml:para>By default, an AD LDS instance automatically enforces any local or domain password policies that exist. If you create a new AD LDS user, and if you assign a password to that user that does not meet the requirements of the password policy that is in effect, the user will be disabled.</maml:para>
<maml:para>By default, AD LDS supports and enforces the password policy settings and account lockout settings that are provided by Windows Server 2008 R2, including the following:</maml:para>
<maml:para>Minimum age </maml:para>
<maml:para>Maximum age </maml:para>
<maml:para>Complexity </maml:para>
<maml:para>History </maml:para>
<maml:para>Too many failed logon attempts </maml:para>
<maml:para>Disabling and enabling of accounts </maml:para>
<maml:para>If the server on which AD LDS is running belongs to a workgroup, the server's local password policy settings and account lockout settings are implemented. If the server on which AD LDS is running belongs to a domain, the password policy settings and account lockout settings from Active Directory Domain Services (AD DS) are implemented.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Setting or modifying the password of an AD LDS user</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using ADSI Edit</maml:linkText><maml:uri href="mshelp://windows/?id=999967cd-9f18-44c5-8d80-347343cac9d1#BKMK_adsi"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using Ldp over an encrypted, non-SSL connection</maml:linkText><maml:uri href="mshelp://windows/?id=999967cd-9f18-44c5-8d80-347343cac9d1#BKMK_ldp_nonssl"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using Ldp over an SSL connection</maml:linkText><maml:uri href="mshelp://windows/?id=999967cd-9f18-44c5-8d80-347343cac9d1#BKMK_ldp_ssl"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_adsi">
<maml:title>Using ADSI Edit</maml:title><maml:introduction>
<maml:procedure><maml:title>To set or modify the password of an AD LDS user using ADSI Edit</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the directory partition containing the AD LDS user for whom you want to set or modify the password. For more information, see <maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Browse to the directory object representing the AD LDS user, and then right-click the directory object.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Reset password</maml:ui>, and then type a password for the user in <maml:ui>New password</maml:ui> and in <maml:ui>Confirm password</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_ldp_nonssl">
<maml:title>Using Ldp over an encrypted, non-SSL connection</maml:title><maml:introduction>
<maml:procedure><maml:title>To set or modify the password of an AD LDS user using Ldp over an encrypted, non-SSL connection</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Ldp.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Options</maml:ui> menu, click <maml:ui>Connection Options</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Option Name</maml:ui>, click <maml:ui>LDAP_OPT_ENCRYPT</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Value</maml:ui>, type <maml:userInput>1</maml:userInput>, click <maml:ui>Set</maml:ui>, and then click <maml:ui>Close</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the AD LDS instance, and then view the directory partition that contains the AD LDS user for whom you want to set a password. For more information, see <maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click the AD LDS user, and then click <maml:ui>Modify</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Attribute</maml:ui>, type <maml:userInput>userpassword</maml:userInput>, and then, in <maml:ui>Value</maml:ui>, type a password for the account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enter</maml:ui>, and then click <maml:ui>Run</maml:ui>. The details pane displays a message similar to the following: </maml:para>
<dev:code>***Call Modify...
ldap_modify_s(ld, 'CN=Mary Baker,O=Microsoft,C=US',[1] attrs);
Modified "CN=Mary Baker,O=Microsoft,C=US".</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Ldp, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, type <maml:userInput>ldp</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can also use ADSI Edit to set or modify passwords: right-click the directory object that represents the AD LDS security principal in ADSI Edit, and then click <maml:ui>Reset Password</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, an AD LDS instance running on Windows Server 2008 R2 automatically enforces any local or domain password policies. If you set a password for an AD LDS user that does not meet the requirements of the password policy in effect, the user account will be disabled.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The AD LDS user for whom you set or modify the password must use the new password the next time that the user logs on.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>This procedure applies to any object class that is used as a security principal in AD LDS. Any object class in AD LDS can be used as a security principal, as long as the object class definition contains the <maml:phrase>msDS-bindableobject</maml:phrase> auxiliary class and the <maml:phrase>unicodePwd</maml:phrase> attribute. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The <maml:phrase>user</maml:phrase>, <maml:phrase>person</maml:phrase>, <maml:phrase>inetOrgPerson</maml:phrase>, and <maml:phrase>OrganizationalPerson</maml:phrase> object classes are not available by default in the AD LDS schema. You must first import them. </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Set or Modify the Password of an AD LDS User (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137818</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137818"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_ldp_ssl">
<maml:title>Using Ldp over an SSL connection</maml:title><maml:introduction>
<maml:procedure><maml:title>To set or modify the password of an AD LDS user using Ldp over an SSL connection</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Install a server certificate on the computer where the AD LDS instance is running, and install a matching client certificate on the computer from which you administer the AD LDS instance.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Ldp.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the AD LDS instance (select <maml:ui>SSL</maml:ui> in the <maml:ui>Connect</maml:ui> dialog box) containing the user for whom you want to set or modify a password. For more information, see <maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click the AD LDS user, and then click <maml:ui>Modify</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Attribute</maml:ui>, type <maml:userInput>userpassword</maml:userInput>, and then in <maml:ui>Value</maml:ui>, type a password for the account.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Enter</maml:ui>, and then click <maml:ui>Run</maml:ui>. The details pane displays a message similar to the following: </maml:para>
<dev:code>***Call Modify...
ldap_modify_s(ld, 'CN=Mary Baker,OU=Beta
users,O=Microsoft,C=US',[1] attrs);
Modified "CN=Mary Baker,OU=Beta users,O=Microsoft,C=US".</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Ldp, click <maml:ui>Start</maml:ui>, click <maml:ui>Run</maml:ui>, in <maml:ui>Open</maml:ui> type <maml:userInput>ldp</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Establishing SSL connections requires the presence of certificates on the server and clients.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, an AD LDS instance running on Windows Server 2008 R2 automatically enforces any local or domain password policies. If you set a password for an AD LDS user that does not meet the requirements of the password policy in effect, the user account will be disabled.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the AD LDS user is currently logged on, that user must log off for the new password to take effect.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>This procedure applies to any object class that is used as a security principal in AD LDS. Any object class in AD LDS can be used as a security principal, as long as the object class definition contains the <maml:phrase>SecurityPrincipal</maml:phrase> static auxiliary class and the <maml:phrase>unicodePwd</maml:phrase> attribute.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The <maml:phrase>user</maml:phrase>, <maml:phrase>person</maml:phrase>, <maml:phrase>inetOrgPerson</maml:phrase>, and <maml:phrase>OrganizationalPerson</maml:phrase> object classes are not available by default in the AD LDS schema. You must import them first. For more information, see <maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add or Remove Members to or from an AD LDS Group</maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) relies on users and groups to provide and control access to directory data. AD LDS supports the simultaneous use of both Windows users and AD LDS users. AD LDS provides four default, role-based groups. You can create additional AD LDS groups as necessary. Both Windows users and AD LDS users can be members of AD LDS groups. To create AD LDS users in AD LDS, you must first import the user object class definitions that are provided with AD LDS, or you can supply your own user object class definitions.</maml:para>
<maml:para>AD LDS provides four default, role-based groups: Administrators, Instances, Readers, and Users. These groups reside in the configuration partition and in each application partition, but not in the schema partition. Within a configuration set, AD LDS replicates these groups, along with all other directory data.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add or remove members to or from an AD LDS group</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the AD LDS instance containing the group that you want to modify. For more information, see <maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, double-click the directory partition containing the group that you want to modify.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click the group that you want to modify, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Attributes</maml:ui>, click <maml:ui>Member</maml:ui>, and then click <maml:ui>Edit</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>For each AD LDS security principal that you want to add to the group, click <maml:ui>Add DN</maml:ui>, type the distinguished name of the new member, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>For each Windows security principal that you want to add to the group, click <maml:ui>Add Windows account</maml:ui>, type the account name of the new member, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>For each group member that you want to remove from the group, click the member that you want to remove, and then click <maml:ui>Remove</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After making the changes that you want to the group, click <maml:ui>OK</maml:ui> twice.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>In AD LDS it is possible for an AD LDS administrator, or for a user with sufficient access to the Administrators group, to remove member accounts from the AD LDS Administrators group, possibly leaving AD LDS without any valid administrators. To recover from this scenario, the assigned AD LDS administrator, as the owner of the Administrators group, can repopulate the AD LDS Administrators group with the appropriate accounts.</maml:para>
</maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add or Remove Members to or from an AD LDS Group (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137812</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137812"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use ADSI Edit to Manage an AD LDS Instance</maml:title><maml:introduction>
<maml:para>ADSI Edit is a Microsoft Management Console (MMC) snap-in for general administration of Active Directory Lightweight Directory Services (AD LDS). It is installed as part of the AD LDS server role. To use ADSI Edit to administer an AD LDS instance, you must first connect and bind to the instance. You can administer containers and objects in the instance by browsing to the containers or objects and then right-clicking them.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To connect and bind to an AD LDS instance using ADSI Edit</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Connect to</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select or type a domain or server: (Server |</maml:ui> <maml:ui>Domain[:port]</maml:ui>, type the Domain Name Service (DNS) name, NetBIOS name, or IP address of the computer on which the AD LDS instance is running, followed by a colon (:) and the Lightweight Directory Access Protocol (LDAP) communication port that the AD LDS instance to which you want to connect is using.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>If you have previously connected to the instance on this computer, the server and port might already be in the list.</maml:para>
</maml:alertSet>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Under <maml:ui>Connection point</maml:ui>, do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Click <maml:ui>Select or type a distinguished name (DN) or naming context</maml:ui>, and then specify the distinguished name to which you want to connect.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Click <maml:ui>Select a well-known naming context</maml:ui>, and then click <maml:ui>Configuration</maml:ui>, <maml:ui>RootDSE</maml:ui>, or <maml:ui>Schema</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To connect with an alternative account, click <maml:ui>Advanced</maml:ui>; click <maml:ui>Specify Credentials</maml:ui>; and then, under <maml:ui>Connect using these credentials</maml:ui>, type the domain, user name, and password of the account.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To create additional connections to AD LDS instances, on the <maml:ui>Action</maml:ui> menu, click <maml:ui>Connect to</maml:ui> for each new connection.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The default communication port for LDAP is 389.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To connect to an AD LDS instance running on the local computer, type <maml:userInput>localhost</maml:userInput> as the server name.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Ldp</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Ldp</maml:title><maml:introduction>
<maml:para>The <maml:ui>Ldp</maml:ui> dialog box consists of two panes: the console tree and the details pane. The console tree lists the base object and any child objects. The details pane lists the results of the Lightweight Directory Access Protocol (LDAP) operations. To start Ldp, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, click <maml:ui>Run as administrator</maml:ui>, type <maml:userInput>ldp</maml:userInput> at the command prompt, and then press ENTER.</maml:para>
<maml:para>The following sections describe the commands on the Ldp menus:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Connection</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c#BKMK_connection"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Browse</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c#BKMK_browse"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>View</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c#BKMK_view"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Options</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c#BKMK_options"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Utilities</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c#BKMK_utilities"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_connection">
<maml:title>Connection</maml:title><maml:introduction>
<maml:para>The following table describes the commands on the <maml:ui>Connection</maml:ui> menu.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Command</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Connect</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to open a session with a specified LDAP server. A connection must be established with an LDAP server before any other LDAP commands can be run. Type the appropriate port number for the service that you are connecting to. By default, LDAP uses TCP for a connection-oriented session. To use User Datagram Protocol (UDP) for a connectionless session, select the <maml:ui>Connectionless</maml:ui> check box. By default, a successful connection results in the appearance of <maml:ui>RootDSE</maml:ui> information in the details pane.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Bind</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to authenticate a specified LDAP server. Type a user name and password of an account that has permissions to the LDAP server. If you do a simple bind with an empty password, you will be connected with anonymous credentials. As a shortcut, use the <maml:ui>Bind</maml:ui> command without using the <maml:ui>Connect</maml:ui> command to connect, and then authenticate with the server that you last connected to. Click <maml:ui>Advanced</maml:ui> on the <maml:ui>Bind</maml:ui> dialog box to open the <maml:ui>Bind Options</maml:ui> dialog box and configure authentication method options.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Bind Options</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Function Type</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies a category of authentication for Ldp to use when choosing authentication methods. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Generic</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the use of a standard authentication protocol.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Simple</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the use of no authentication protocol, and sends the password in plaintext.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Extended</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Not available.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Method</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the type of authentication that Ldp uses when passing credentials.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Synchronous</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the authenticating server must respond immediately to requests. This option works only with simple authentication.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Use auth. identity</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allows the use of alternate authentication credentials. All authentication methods except simple methods require synchronous calls.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Disconnect</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Terminates an open session with a specified LDAP server. Closing Ldp automatically disconnects any open sessions. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>New</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Keeps the currently connected session, but clears the details pane. The keyboard shortcut for this action is CTRL+N.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Save</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Saves changes to a previously saved file. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Save as</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Saves the contents of the details pane to a text file. Use the <maml:ui>Open</maml:ui> command to view the contents of this file in the details pane later.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Print</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Prints the contents of the details pane.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section address="BKMK_browse">
<maml:title>Browse</maml:title><maml:introduction>
<maml:para>The following sections describe the commands on the <maml:ui>Browse</maml:ui> menu.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Add Child</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to add objects to Active Directory Lightweight Directory Services (AD LDS). You must enter the full distinguished name of the object, as well as all the mandatory attributes for the class of object that you are adding.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Add</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Dn</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the full distinguished name of the new object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Attribute</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the required or optional attribute.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Values</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the values that are associated with the attribute. Separate multiple values for a single attribute with a semicolon. No spaces are required.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Enter</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds the entered attribute and values to the <maml:ui>Entry List</maml:ui> box, and clears the <maml:ui>Attribute</maml:ui> and <maml:ui>Values</maml:ui> boxes. Continue entering attributes and values until all required and desired optional attributes are in the <maml:ui>Entry List</maml:ui> box.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Insert file</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to open a text file with the appropriate attributes and values.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Entry List</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays the attributes and values that you enter.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Edit</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to enter changes to the selected entry in the <maml:ui>Entry List</maml:ui> box.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Remove</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Deletes the selected entry from the <maml:ui>Entry List</maml:ui> box.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Extended</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box if the object that you are adding is part of an extended control.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Synchronous</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this check box is selected (which is the default), Ldp is required to wait for a response from the destination server before continuing. If you clear this check box, Ldp continues before a response is received. Clear this check box when slow wide area network (WAN) connections are causing Ldp commands to time out.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Run</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds the current attributes and values in the Entry List to AD LDS. If Ldp encounters any errors, the object is not added and an error message appears in the details pane.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Delete</maml:title><maml:introduction>
<maml:para>This command opens a dialog box that you can use to delete an object from AD LDS. Attributes can be deleted only if they are defined as optional and if they contain no values. To delete an attribute's values, on the <maml:ui>Browse</maml:ui> menu in the <maml:ui>Add</maml:ui> dialog box, click <maml:ui>Edit</maml:ui>.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>DN</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the full distinguished name of the new object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Extended</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box if the object being modified is part of an extended control.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Synchronous</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this check box is selected (which is the default), Ldp is required to wait for a response from the destination server before continuing. If you clear this check box, Ldp continues before a response is received. Clear this check box when slow WAN connections are causing Ldp commands to time out.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Recursive (client)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Deletes all objects in a container, but does not delete the container.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Modify</maml:title><maml:introduction>
<maml:para>This command opens a dialog box that you can use to change the attributes of an object that is stored in AD LDS.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Modify</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Dn</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the full distinguished name of the new object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Attribute</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the required or optional attribute.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Values</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the values that are associated with the attribute. Separate multiple values for a single attribute with a semicolon. No spaces are required.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Insert file</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to open a text file with the appropriate attributes and values.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Enter</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds the entered attribute and values to the <maml:ui>Entry List</maml:ui> section of the dialog box, and clears the <maml:ui>Attribute</maml:ui> and <maml:ui>Values</maml:ui> fields. Continue entering attributes and values until all required and desired optional attributes are in the <maml:ui>Entry List</maml:ui> box.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Operation</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:ui>Add</maml:ui>, <maml:ui>Delete</maml:ui>, or <maml:ui>Replace</maml:ui>. To add a new value to an existing attribute, click <maml:ui>Add</maml:ui>. To permanently remove an attribute from the listed object, click <maml:ui>Delete</maml:ui>. Attributes that contain data cannot be deleted. Also, attempting to delete required attributes results in an error. To replace an existing value with another or to change listed values for an existing attribute, click <maml:ui>Replace</maml:ui>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Entry List</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays the existing attributes and values for an object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Edit</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to make changes to the selected entry in the <maml:ui>Entry List</maml:ui> box.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Synchronous</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this check box is selected (which is the default), Ldp is required to wait for a response from the destination server before continuing. If you clear this check box, Ldp continues before a response is received. Clear this check box when slow WAN connections are causing Ldp commands to time out.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Extended</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box if the object being modified is part of an extended control. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Run</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sends the edited values in the <maml:ui>Entry List</maml:ui> box to AD LDS.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Modify DN</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to change the relative distinguished name of an object. This option is designed to modify leaf objects only. If you rename the container portion of the distinguished name, the object moves to the container that is named.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Modify RDN</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Old Dn</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the current distinguished name of the object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>New Dn</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the new distinguished name for the object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Delete Old</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this check box is selected (which is the default), the old distinguished name is removed from the LDAP directory. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Synchronous</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this check box is selected (which is the default), Ldp is required to wait for a response from the destination server before continuing. If you clear this check box, Ldp continues before a response is received. Clear this check box when slow WAN connections are causing Ldp commands to time out.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Extended rename</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box if the object being renamed is part of an extended control.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Run</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sends the change to AD LDS.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Search</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to create a customized search filter and to perform the search on the directory information tree. The search base must be specified as a distinguished name, and the filter must be a valid LDAP filter. Items that are returned from a search are separated by <maml:ui>>></maml:ui> characters.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Search</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Base Dn</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type a distinguished name to specify where the search starts.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Filter</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the search criteria, separated by LDAP search filters. Type attributes and values to find an object or set of objects. Note that LDAP search filters are defined in RFC 2254 and in article 255602 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?linkid=4441</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?linkid=4441"></maml:uri></maml:navigationLink>). </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Scope</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies how many levels the search encompasses.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Base</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Searches the base object only.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>One Level</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Searches objects immediately subordinate to the base object, but does not search the base object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Subtree</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Searches the entire subtree, from the base object down to all child objects.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Options</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens the <maml:ui>Search Options</maml:ui> dialog box. You can use these options to apply filters that allow some entries and exclude others from the search and that allow you to control the way the search is processed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Run</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sends the search request to AD LDS.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Compare</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to compare the value of an attribute of an object with a specified value. The result returned is either true or false.</maml:para>
<maml:para>The following table describes options in the <maml:ui>Compare</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Dn</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the full distinguished name of the object whose values will be compared.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Attribute</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the attribute to be compared.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Value</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the value that will be compared with the existing value in AD LDS. Separate multiple values for a single attribute with a semicolon. No spaces are required.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Synchronous</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this check box is selected (which is the default), Ldp is required to wait for a response from the destination server before continuing. If you clear this check box, Ldp continues before a response is received. Clear this check box when slow WAN connections are causing Ldp commands to time out.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Run</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Starts the comparison.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Extended Op</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to submit an extended operation to an LDAP directory by specifying an LDAP object identifier (also known as OID) and an applicable value.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Extended Operations</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Oid</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the object identifier number.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Data</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the value of the object identifier attribute.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Controls</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>See <maml:ui>Controls Option</maml:ui> in the <maml:ui>Options</maml:ui> section.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Send</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Submits the extended operation to AD LDS.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>GetLastError</maml:title><maml:introduction>
<maml:para>Calls the LDAP <maml:ui>GetLastError</maml:ui> function.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Security</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to submit an extended operation to an LDAP directory by specifying an LDAP object identifier and an applicable value.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Security Descriptor</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Security Descriptor</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens a dialog box that you can use to view access permissions on an object.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Replication</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to submit an extended operation to an LDAP directory by specifying an LDAP object identifier and an applicable value.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Replication Metadata</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Replication/View Metadata</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>In <maml:ui>Object DN</maml:ui>, type the distinguished name of the object whose replication metadata you want to view.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Process Pending</maml:title><maml:introduction>
<maml:para>Opens a dialog box that shows the list of requests that are not finished processing.</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_view">
<maml:title>View</maml:title><maml:introduction>
<maml:para>The following table describes the commands on the <maml:ui>View</maml:ui> menu.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Command</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Tree</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>In <maml:ui>BaseDN</maml:ui>, type the distinguished name of the object to use as the base object in the navigation pane.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Enterprise Configuration</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>This menu option does not apply to AD LDS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Status Bar</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Shows or hides the status bar, which is located along the bottom of the LDAP window.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section address="BKMK_options">
<maml:title>Options</maml:title><maml:introduction>
<maml:para>The following sections describe the commands on the <maml:ui>Options</maml:ui> menu.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Search</maml:title><maml:introduction>
<maml:para>The following table describes the options in the <maml:ui>Search Options</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Time limit</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the number of milliseconds that the search can take on the server. By default, the maximum is 120 seconds.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Size limit</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the maximum number of bytes that the search can return. Typing a null value does not place a maximum size on the data that is returned.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Timeout (s)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the number of seconds that Ldp waits for the LDAP server to respond to a search request.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Timeout (ms)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the number of milliseconds that Ldp waits for the LDAP server to respond to a search request.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Page size</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the maximum size, in bytes, of each page of returned data.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Attributes</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies which attributes to return in the search. Separate multiple attributes with a semicolon. Use the wildcard character (<maml:ui>*</maml:ui>) to indicate all attributes.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Search Call Type</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies a call type to use in the search. If the search will take some time, you can click <maml:ui>Async.</maml:ui> so that you can perform other tasks while waiting for the search to complete.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Attributes Only</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select this check box to return only attributes of objects. The distinguished name is not returned.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Chase referrals</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs a search for objects that are found in external LDAP directories. By default, the objects' trusts of external LDAP directories return only a referral instead of the actual object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Display Results</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays a detailed list of objects that are returned by the search. By default, only a success or failure and the number of objects found appear.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Sort Keys</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens the <maml:ui>Sort Keys</maml:ui> dialog box. See the <maml:ui>Sort Keys</maml:ui> section below.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Controls</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Opens the <maml:ui>Controls</maml:ui> dialog box.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Pending</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to place filters on the list of processes that have not yet completed.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Pending Options</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>All search results</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that all search results display.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Blocking</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Clear this check box to set a time limit.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Time Limit (sec):</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type a time limit in seconds.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Time Limit (millisec):</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type a time limit in milliseconds.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>General</maml:title><maml:introduction>
<maml:para>The following table describes the options in the <maml:ui>General Options</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Value Parsing</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the display format of the LDAP data. <maml:ui>Binary</maml:ui> displays the LDAP information in its native numerical format. <maml:ui>String</maml:ui> converts the LDAP information from its native format to ASCII characters so that it is more readable when it is displayed. This is the default setting. Values that are too long to be converted are still displayed in binary form.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>LDAP Version</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies which version of LDAP the server is using. The default is <maml:ui>version 3</maml:ui>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>DN processing</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Converts the distinguished names, which are displayed in component parts, by extending the data types that Ldp returns when it performs a command. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Buffer Size</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>In <maml:ui>Number of lines</maml:ui>, type the number of returned lines to display per command. In <maml:ui>Chars per line</maml:ui>, type the number of returned characters to display per command.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Auto default NC query</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that Ldp queries the default naming context when a connection to the LDAP server is made. The default naming context is the <maml:ui>RootDSE</maml:ui>. This setting is used when the distinguished name value in the <maml:ui>View|Tree</maml:ui> dialog box is left blank. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Virtual List View (VLV)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Select the <maml:ui>Auto VLV browse when</maml:ui> check box to display a virtual list view whenever the object count is greater than the value that is displayed in the <maml:ui>container size is greater than</maml:ui> box. The default value is 100. </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Connection Options</maml:title><maml:introduction>
<maml:para>Opens a dialog box that you can use to change the value of any option.</maml:para>
<maml:para>The following table describes the options in the <maml:ui>Connection Options</maml:ui> dialog box.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Option Name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the name of the option whose value will be reset.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Value</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type the new value for the specified option.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Set</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sends the information to the LDAP directory.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Controls</maml:title><maml:introduction>
<maml:para>In the <maml:ui>Controls</maml:ui> dialog box, enter information to extend the functionality of LDAP.</maml:para>
<maml:para>The <maml:ui>Object Identifier</maml:ui> option must be specified when you implement a control. To obtain a list of object identifiers, view the <maml:ui>supportedControls</maml:ui> property in the <maml:ui>RootDSE</maml:ui> of a domain controller.</maml:para>
<maml:para><maml:ui>Additional considerations</maml:ui></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Only server controls can be sent to a server. Client controls work only with LDAP application programming interfaces (APIs). </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To view a list of extended LDAP controls, see article 222560 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?linkid=4441</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?linkid=4441"></maml:uri></maml:navigationLink>). </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Sort Keys</maml:title><maml:introduction>
<maml:para><maml:ui>Sort Keys</maml:ui> is a type of control that formats the display of search results. To format the display of your search results, in the <maml:ui>Sort Keys</maml:ui> dialog box, type an attribute type.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>TLS</maml:title><maml:introduction>
<maml:para>The following table describes the subcommands for the <maml:ui>TLS</maml:ui> command.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>StartTLS</maml:ui> or <maml:ui>StopTLS</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Starts or stops a secure session with the LDAP server that uses Transport Layer Security (TLS).</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_utilities">
<maml:title>Utilities</maml:title><maml:introduction>
<maml:para>The following table describes the commands on the <maml:ui>Utilities</maml:ui> menu.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Option</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Large Integer Converter</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>To convert long integers into high and low parts, type a value in the <maml:ui>String</maml:ui> box.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>SID Lookup</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>To determine the <maml:replaceable>domain\user</maml:replaceable> that is associated with a given security ID (SID), type a SID into <maml:ui>List of sids</maml:ui>, and then click <maml:ui>OK</maml:ui>. The associated <maml:replaceable>domain\user</maml:replaceable> appears in the details pane.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administration Tools</maml:linkText><maml:uri href="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>ADSI Edit</maml:linkText><maml:uri href="mshelp://windows/?id=95fd3ac1-6fa7-4640-bca9-8651fb968e29"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Instance Name</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Instance Name</maml:ui> page, you must provide an easily recognizable name for the Active Directory Lightweight Directory Services (AD LDS) instance that you are installing. This name is used on the local computer to uniquely identify this AD LDS instance.</maml:para>
<maml:para>The name that you specify appears in the following places:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Event Viewer</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Services snap-in</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Add or Remove Programs</maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>The Active Directory Lightweight Directory Services Setup Wizard presents a default instance name of instance<maml:foreignPhrase>X</maml:foreignPhrase>, where <maml:foreignPhrase>X</maml:foreignPhrase> equals 1 for the first AD LDS instance that is installed on the computer, 2 for the second AD LDS instance that is installed on the computer, and so on.</maml:para>
</maml:alertSet>
<maml:para>The name that you specify must meet the following requirements:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>It must be unique with respect to other AD LDS instances running on the same computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>It must be no longer than 44 characters.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>It must use characters only from the ranges of a through z, A through Z, or 0 through 9. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The name "ntds" cannot be used.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>The instance name that you specify is used to construct the service name, the service display name, and the service description, as described in the following table. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Name supplied during setup</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Service name</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Service display name</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Service description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>instance1</maml:para>
</maml:entry>
<maml:entry>
<maml:para>ADAM_instance1</maml:para>
</maml:entry>
<maml:entry>
<maml:para>instance1</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Blank (No default description is provided.)</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Copy Application Directory Partitions</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Copy Application Directory Partitions</maml:ui> page, you can specify one or more application directory partitions to copy from the configuration set that you are joining. You are not required to copy any application directory partitions when you join a configuration set.</maml:para>
<maml:para>The configuration and schema directory partitions are always copied from the configuration set that you are joining, even if you choose not to copy any application directory partitions.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para> If <maml:ui>Available partitions</maml:ui> does not contain any application directory partitions, the Active Directory Lightweight Directory Services (AD LDS) instance that you specified on the <maml:ui>Joining a Configuration Set</maml:ui> page does not contain any application directory partitions.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Administering Directory Partitions</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Administering directory partitions</maml:title><maml:introduction>
<maml:para>There are three types of directory partitions in Active Directory Lightweight Directory Services (AD LDS): configuration, schema, and application. Configuration and schema directory partitions are created automatically during installation. Application directory partitions can be created either during or after installation. Every AD LDS directory partition has a unique distinguished name. Distinguished names for directory partitions in AD LDS support both Domain Naming System (DNS)–style and X.500-style naming. An AD LDS instance does not specify a naming context by default, but it can be configured to provide a default naming context to clients. You can view and manage AD LDS configuration and schema directory partitions using AD LDS administration tools, which are installed during AD LDS setup. Application directory partitions are typically managed through directory-enabled applications.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Creating directory partitions</maml:title><maml:introduction>
<maml:para>The schema and configuration directory partitions are created automatically during installation of an AD LDS instance. (In fact, the schema and configuration directory partitions can be created only during AD LDS installation.) If you choose to join the AD LDS instance being installed to an existing configuration set, the schema and configuration directory partitions from an AD LDS instance in the configuration set are replicated to the new instance. If you install a new AD LDS instance, the installation process creates default versions of the schema and configuration directory partitions for you. If you install an AD LDS instance from media, the schema and configuration directory partitions for the new AD LDS instance are replicas of the directory partitions from the media.</maml:para>
<maml:para>When you install a new AD LDS instance, you can also choose to replicate one or more application directory partitions from an existing AD LDS instance. Or, you can choose to create a new application partition. When you create a new application directory partition during installation, you must specify a unique distinguished name for the partition. The new application directory partition consists only of a partition container object with the distinguished name that you specify.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Naming directory partitions</maml:title><maml:introduction>
<maml:para>Each AD LDS directory partition has its own, unique distinguished name. AD LDS supports both DNS-style and X.500-style names for top-level directory partitions, including the distinguished name attributes that are listed in the following table.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Distinguished name attribute</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Meaning</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>C=</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Country/region</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>CN=</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Common name</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DC=</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Domain component</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>L=</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Location</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>O=</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Organization</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>OU=</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Organizational unit</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Specifying a default naming context</maml:title><maml:introduction>
<maml:para>By default, an AD LDS instance does not provide a default naming context. You can, however, configure AD LDS to provide a default naming context by specifying a value for the <maml:phrase>msDS-defaultNamingContext</maml:phrase> attribute on the NTDSA object.</maml:para>
<maml:para>By default, this <maml:phrase>msDS-defaultNamingContext</maml:phrase> attribute contains no value. If a value is set in the attribute, that value is returned to a client through the <maml:phrase>defaultNamingContext</maml:phrase> attribute of the rootDse object when the rootDSE object is read.</maml:para>
<maml:para>When a bind is requested on the rootDSE object, AD LDS returns the value of <maml:phrase>defaultNamingContext</maml:phrase> if the <maml:phrase>msDS-defaultNamingContext</maml:phrase> attribute on the NTDSA object is set to the distinguished name of a top-level container of an instantiated naming context. Otherwise, no value is returned.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Importing and exporting directory objects</maml:title><maml:introduction>
<maml:para>You can use a number of methods to import and export directory objects, both to and from the schema directory partition as well as to and from application directory partitions. You can use the <maml:computerOutputInline>ldifde</maml:computerOutputInline> command-line tool to import and export .ldf files. You can use the <maml:computerOutputInline>csvde</maml:computerOutputInline> command-line tool to import and export .csv (comma-delimited) files.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Administering application directory partitions</maml:title><maml:introduction>
<maml:para>You can create an application directory partition during setup. You can also create application directory partitions anytime after installation, either through AD LDS administration tools or through your directory-enabled application. In production environments, you typically manage your application directory partitions and the data that they contain through your directory-enabled applications.</maml:para>
<maml:para>For information about creating application directory partitions, see <maml:navigationLink><maml:linkText>Create an Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=f43b2a3a-18ec-4f24-84d6-90df5a93c750"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=4fd8db90-43e2-4b3b-85f8-af92aab5249c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create an Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=f43b2a3a-18ec-4f24-84d6-90df5a93c750"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Create a New Instance of AD LDS</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>An instance of Active Directory Lightweight Directory Services (AD LDS) is a single running copy of AD LDS. Multiple copies of AD LDS can run simultaneously on the same computer. (This is not true for Active Directory Domain Services (AD DS).) This improves availability and load balancing when instances are replicated across multiple servers. Each instance of AD LDS has a separate directory, a unique service name, and a unique service description that is assigned when the instance is created. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS instances.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Run the Active Directory Lightweight Directory Services Setup Wizard.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Create a New AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=13afca07-9bcb-47fa-b686-22bbfdcfa7fb"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Administrative Credentials for the Configuration Set</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Administrative Credentials for the Configuration Set</maml:ui> page, you must specify valid administrative credentials for the configuration set to which you are joining the Active Directory Lightweight Directory Services (AD LDS) instance.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para> The account that you specify on this wizard page must belong to the Administrators group in the configuration directory partition of the configuration set that you are joining (CN=Administrators,CN=Roles,CN=Configuration,CN={<maml:replaceable>GUID</maml:replaceable>}).</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Active Directory Lightweight Directory Services</maml:title><maml:introduction>
<maml:para>Active Directory® Lightweight Directory Services (AD LDS) is a Lightweight Directory Access Protocol (LDAP) directory service in the Windows Server® 2008 R2 operating system that provides flexible support for directory-enabled applications, without the dependencies and domain-related restrictions of Active Directory Domain Services (AD DS). You can run AD LDS on member servers or stand-alone servers. You can also run multiple instances of AD LDS—each with its own independently managed schema—on one server.</maml:para>
<maml:para>AD LDS was previously called Active Directory Application Mode (ADAM). Under that name, it was available in Windows Server 2003 R2. It is also available as a separate download for Windows® XP Professional and Windows Server 2003.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Overview of AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=d2b337b3-47e7-458c-b5a4-9e3d14a08078"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Create a New Instance of AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=abd379d1-9604-4558-9a3b-2871044d227f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Create a Replica of an Existing AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=3878750b-49cb-4d30-b8c2-6947a3c2ac0f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Import Data from LDIF Files</maml:linkText><maml:uri href="mshelp://windows/?id=8b3ee0f1-73d2-4066-99d9-529de6460244"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Create an Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=82f0d560-3e2c-441e-a3b3-ca3fa5b87380"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Manage Group Memberships</maml:linkText><maml:uri href="mshelp://windows/?id=10d042cc-430f-4e9f-bc09-b3361ff1ad1a"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Back Up or Restore an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=d3060406-b3d4-44a0-a63f-180164f4f387"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Synchronize Data from AD DS to AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=45ba077e-e529-4740-894e-26d8322a57a4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=4fd8db90-43e2-4b3b-85f8-af92aab5249c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>AD LDS Administration Tools</maml:linkText><maml:uri href="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Ready to Install</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Ready to Install</maml:ui> page, you can review the Active Directory Lightweight Directory Services (AD LDS) setup options that you selected. You can click <maml:ui>Back</maml:ui> to return to a previous wizard page that contains a setting that you want to change.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>After you click <maml:ui>Next</maml:ui> on the <maml:ui>Ready to Install</maml:ui> page, the Active Directory Lightweight Directory Services Setup Wizard automatically begins copying files and configuring the new AD LDS instance.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Joining a Configuration Set</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Joining a Configuration Set</maml:ui> page, you must specify an Active Directory Lightweight Directory Services (AD LDS) instance from which to replicate the configuration and schema directory partitions for the new AD LDS instance that you are installing. The AD LDS instance that you specify on this page also determines the AD LDS configuration set in which the new AD LDS instance will participate.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para> If you are installing a replica AD LDS instance into an existing configuration set that includes AD LDS instances in multiple forests, use the full Domain Name System (DNS) name, rather than the IP address, when you specify the source AD LDS instance from which to replicate.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding AD LDS Users and Groups</maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) relies on users and groups to provide and control access to directory data. AD LDS supports the simultaneous use of both Windows users and AD LDS users. AD LDS provides four default, role-based groups. You can create additional AD LDS groups as necessary. Both Windows users and AD LDS users can be members of AD LDS groups. To create AD LDS users in AD LDS, you must first import the user object class definitions that are provided with AD LDS, or you can supply your own user object definitions.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Default groups</maml:title><maml:introduction>
<maml:para>AD LDS provides four default, role-based groups: Administrators, Instances, Readers, and Users. These groups reside in the configuration partition and in each application partition, but not in the schema partition. Within a configuration set, AD LDS replicates these groups, along with all other directory data.</maml:para>
<maml:para>The following three groups reside in the CN=Roles container of each directory partition:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Administrators (CN=Administrators,CN=Roles)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Readers (CN=Readers,CN=Roles)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Users (CN=Users,CN=Roles)</maml:para>
</maml:listItem>
</maml:list>
<maml:para>The following group resides only in the CN=Roles container of the configuration directory partition: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Instances (CN=Instances,CN=Roles)</maml:para>
</maml:listItem>
</maml:list>
<maml:para>The following table lists the default AD LDS groups, along with the default members and default access assigned to each group.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Group</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Default members</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Default access</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Administrators</maml:phrase></maml:para>
<maml:para>(CN=Administrators,CN=Roles)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:phrase>Configuration partition:</maml:phrase></maml:para>
<maml:para>AD LDS administrators that are assigned during AD LDS setup</maml:para>
<maml:para><maml:phrase>Application partitions:</maml:phrase></maml:para>
<maml:para>The Administrators group from the configuration partition</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Full access to all partitions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Instances</maml:phrase></maml:para>
<maml:para>(CN=Instances,CN=Roles)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>All instances</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Readers</maml:phrase></maml:para>
<maml:para>(CN=Readers,CN=Roles)</maml:para>
</maml:entry>
<maml:entry>
<maml:para>None</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Read access to the partition</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:phrase>Users</maml:phrase></maml:para>
<maml:para>(CN=Users,CN=Roles)</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:phrase>Configuration partition:</maml:phrase></maml:para>
<maml:para>Transitively, all AD LDS users</maml:para>
<maml:para><maml:phrase>Application partitions:</maml:phrase></maml:para>
<maml:para>Transitively, all AD LDS users that are created in the partition</maml:para>
</maml:entry>
<maml:entry>
<maml:para>None</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>Groups from the configuration partition can be assigned permissions in any partition of an AD LDS instance or configuration set. Groups from an application partition can be assigned permissions only in that application partition. Windows security principals can be assigned permissions in any application partition.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Security principals</maml:title><maml:introduction>
<maml:para>The term "security principal" refers to any object that has a security identifier (SID) and that can be assigned permissions to directory objects. In AD LDS, security principals can reside in AD LDS, on a local computer, or in an Active Directory Domain Services (AD DS) domain.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You can retrieve an active user's individual and group SIDs by explicitly querying the <maml:phrase>tokenGroups</maml:phrase> attribute on the rootDSE.</maml:para>
</maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>AD LDS security principals</maml:title><maml:introduction>
<maml:para>AD LDS does not include any default security principals. However, AD LDS does provide importable schema extensions that you can use to create users in AD LDS. Users that are created from these user classes can be used as security principals. In addition, you can make any object class in the AD LDS schema a security principal by adding the <maml:phrase>msDS-bindableobject</maml:phrase> auxiliary class and the <maml:phrase>unicodePwd</maml:phrase> attribute to the schema definition of an object class. Each AD LDS security principal must be assigned an account and password, which AD LDS uses for authentication. </maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Windows security principals</maml:title><maml:introduction>
<maml:para>AD LDS allows the use of Windows security principals for authentication and access control. Local Windows users and groups, as well as domain users and groups, can be used with AD LDS. In addition, you can add Windows security principals membership to AD LDS groups as members. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For Windows security principals, AD LDS relies on the Local Security Authority (LSA) on the local computer (for local accounts) or the LSA on a domain controller (for domain accounts) for authentication. </maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add an AD LDS User to the Directory</maml:linkText><maml:uri href="mshelp://windows/?id=e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add an AD LDS Group to the Directory</maml:linkText><maml:uri href="mshelp://windows/?id=c77f5e81-212e-47ab-b4ea-f5ac82f2b026"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add or Remove Members to or from an AD LDS Group</maml:linkText><maml:uri href="mshelp://windows/?id=9bbcb7e7-8db2-405f-a9d8-93022e535747"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Disable or Enable an AD LDS User</maml:linkText><maml:uri href="mshelp://windows/?id=3d1bcd6a-3e51-4be2-a911-a3e83d1b2496"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add an AD LDS Group to the Directory</maml:title><maml:introduction>
<maml:para>You can administer users and groups in Active Directory Lightweight Directory Services (AD LDS) through the ADSI Edit snap-in or through your directory-enabled applications. For information about users and groups in AD LDS, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To create users in AD LDS, you must first import the optional user classes that are provided with AD LDS into the AD LDS schema. These user classes are provided in importable .ldf files, which you can find in the directory %windir%\adam on the computer where AD LDS is installed. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an AD LDS group to the directory</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the AD LDS instance to which you want to add a group. For more information, see <maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, double-click the directory partition to which you want to add the group.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the container to which you want to add the group, point to <maml:ui>New</maml:ui>, and then click <maml:ui>Object</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select a class</maml:ui>, click <maml:ui>Group</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Value</maml:ui>, type a common name (CN) for the new group, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If you want to set values for additional attributes, click <maml:ui>More attributes</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After setting all the desired attributes for the new group, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you type a value for the <maml:phrase>groupType</maml:phrase> attribute, 2147483650 (equivalent to 0x80000002 hexadecimal) represents a group type of "account."</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add an AD LDS Group to the Directory (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137810</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137810"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Restore AD LDS Instance Data</maml:title><maml:introduction>
<maml:para>The procedure that you follow to restore an Active Directory Lightweight Directory Services (AD LDS) instance depends on whether the instance already exists and whether it belongs to a configuration set: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restoring AD LDS data on an existing AD LDS instance that belongs to a configuration set</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6#BKMK_1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restoring a corrupted database that is preventing an existing AD LDS instance from starting</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6#BKMK_2"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restoring an AD LDS instance that does not belong to a configuration set</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6#BKMK_3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restoring an AD LDS instance that belongs to a configuration set</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6#BKMK_4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section address="BKMK_1">
<maml:title>Restoring AD LDS data on an existing AD LDS instance that belongs to a configuration set</maml:title><maml:introduction>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To authoritatively restore AD LDS data on an AD LDS instance that belongs to a configuration set</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If it is running, stop the AD LDS instance for which data will be restored.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Backup. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Recover</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the steps in the Recovery Wizard to specify the location of the source backup data and to identify the specific backup from which you want to recover instance data.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In Click <maml:ui>Select recovery type</maml:ui>, click <maml:ui>Files and folders</maml:ui>, and then click <maml:ui>Next.</maml:ui></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select items to recover</maml:ui>, browse to and select the folder that contains the instance data files. By default, AD LDS database and log files are located in %ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename, </maml:replaceable>where <maml:replaceable>instancename</maml:replaceable> is the AD LDS instance name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Specify recovery options</maml:ui>, click <maml:ui>Original locations</maml:ui> and <maml:ui>Overwrite existing files with recovered files</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To complete the restore, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After the restore is complete, close Backup.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the command prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>dsdbutil </maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the <maml:computerOutputInline>dsdbutil:</maml:computerOutputInline> prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>activate instance</maml:computerOutputInline> <maml:replaceable>instancename</maml:replaceable></maml:para>
<maml:para>where <maml:replaceable>instancename</maml:replaceable> represents the service name of the AD LDS instance on which you want to restore data.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the <maml:computerOutputInline>dsdbutil:</maml:computerOutputInline> prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>authoritative restore</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At the <maml:computerOutputInline>authoritative restore:</maml:computerOutputInline> prompt, type one of the commands in the following table. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Command</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>restore database</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs authoritative restore of the entire directory database.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>restore object</maml:computerOutputInline> <maml:replaceable>dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs authoritative restore of the directory object whose distinguished name is represented by <maml:replaceable>dn</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>restore subtree</maml:computerOutputInline> <maml:replaceable>dn</maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs authoritative restore of the directory subtree whose distinguished name is represented by <maml:replaceable>dn</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Backup, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Backup</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Use the Services snap-in to stop an AD LDS instance.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can use this procedure if you want the data being restored to authoritatively override existing data in the configuration set.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For more information about the <maml:computerOutputInline>authoritative restore</maml:computerOutputInline> command in <maml:computerOutputInline>dsdbutil</maml:computerOutputInline>, at the <maml:computerOutputInline>authoritative restore:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>?</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you accidentally start a restore of an AD LDS instance over a currently running AD LDS instance, we recommend that you immediately restart the computer, stop the AD LDS instance, and then perform the restoration again.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_2">
<maml:title>Restoring a corrupted database that is preventing an existing AD LDS instance from starting</maml:title><maml:introduction>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To restore a corrupted database that is preventing the existing AD LDS instance from starting</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If it is running, stop the AD LDS instance for which data will be restored.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Backup. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Recover</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the wizard steps to specify the location of the source backup data and to identify the specific backup from which you want to recover instance data.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select recovery type</maml:ui>, click <maml:ui>Files and folders</maml:ui>, and then click <maml:ui>Next.</maml:ui></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select items to recover</maml:ui>, browse to and select the folder that contains the instance data files. By default, AD LDS database and log files are located in %ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename, </maml:replaceable>where <maml:replaceable>instancename</maml:replaceable> equals the AD LDS instance name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Specify recovery options</maml:ui>, click <maml:ui>Original locations</maml:ui> and <maml:ui>Overwrite existing files with recovered files</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To complete the restore, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After the restore is complete, close Backup.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Restart the AD LDS instance.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Use the Services snap-in to stop and start an AD LDS instance.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To open Backup, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Backup</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the AD LDS instance fails to start after you perform this procedure, perform the appropriate procedure for completely restoring an AD LDS instance, depending on whether your AD LDS instance belongs to a configuration set or is unique.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you accidentally start a restore of an AD LDS instance over a currently running AD LDS instance, we recommend that you immediately restart the computer, stop the AD LDS instance, and then perform the restoration again.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_3">
<maml:title>Restoring an AD LDS instance that does not belong to a configuration set</maml:title><maml:introduction>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To completely restore an AD LDS instance that does not belong to a configuration set</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Using the Active Directory Lightweight Directory Services Setup Wizard, create an AD LDS instance, specifying the same settings that you used during your original AD LDS installation. However, do not create an application directory partition during setup.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Stop the AD LDS instance that you just created, as follows:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Services</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In Services, right-click the AD LDS instance, and then click <maml:ui>Stop</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Backup. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Recover</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the steps in the Recovery Wizard to specify the location of the source backup data and identify the specific backup from which you want to recover instance data.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select recovery type</maml:ui>, click <maml:ui>Files and folders</maml:ui>, and then click <maml:ui>Next.</maml:ui></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select items to recover</maml:ui>, browse to and select the folder that contains the instance data files. By default, AD LDS database and log files are located in %ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename, </maml:replaceable>where <maml:replaceable>instancename</maml:replaceable> is the AD LDS instance name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Specify recovery options</maml:ui>, click <maml:ui>Original locations</maml:ui> and <maml:ui>Overwrite existing files with recovered files</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To complete the restore, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After the restore is complete, close Backup.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Start the AD LDS instance that you just created, as follows:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Services</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In Services, right-click the AD LDS instance, and then click <maml:ui>Start</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Backup, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Backup</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you accidentally start a restore of an AD LDS instance over a currently running AD LDS instance, we recommend that you immediately restart the computer, stop the AD LDS instance, and then perform the restoration again.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_4">
<maml:title>Restoring an AD LDS instance that belongs to a configuration set</maml:title><maml:introduction>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
<maml:procedure><maml:title>To completely restore an AD LDS instance that belongs to a configuration set</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On one of the remaining AD LDS instances in the configuration set, delete the server object representing the AD LDS instance that you want to restore, as follows:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Open a command prompt.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the command prompt, type <maml:computerOutputInline>dsmgmt</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>dsmgmt:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>metadata cleanup</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>metadata cleanup:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>select operation target</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>select operation target:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>connections</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>server connections:</maml:computerOutputInline> prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>connect to server</maml:computerOutputInline> <maml:replaceable>computername:portnumber</maml:replaceable></maml:para>
<maml:para>where <maml:replaceable>computername:portnumber</maml:replaceable> represents the AD LDS instance to which you are connecting.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>server connections:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>q</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>select operation target:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>list sites</maml:computerOutputInline>, and then press ENTER. Identify the number corresponding to the site in which the server object that you want to delete resides.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>select operation target:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>select site</maml:computerOutputInline> <maml:replaceable>n</maml:replaceable>, and then press ENTER, where <maml:replaceable>n</maml:replaceable> represents the number identified in the previous step.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>select operation target:</maml:computerOutputInline> prompt, type <maml:phrase>list naming contexts</maml:phrase>, and then press ENTER. Identify the number that corresponds to a naming context previously held by the server whose server object you want to delete.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Type <maml:phrase>select naming context</maml:phrase> <maml:replaceable>n</maml:replaceable>, and then press ENTER, where <maml:replaceable>n</maml:replaceable> represents the number identified in the previous step.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Type <maml:computerOutputInline>list servers in site</maml:computerOutputInline>, and then press ENTER. Identify the number that is associated with the server whose server object you want to delete.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Type <maml:phrase>select server</maml:phrase> <maml:replaceable>n</maml:replaceable>, and then press ENTER, where <maml:replaceable>n</maml:replaceable> represents the number identified in the previous step.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>select operation target:</maml:computerOutputInline> prompt, type<maml:computerOutputInline> q</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At the <maml:computerOutputInline>metadata cleanup:</maml:computerOutputInline> prompt, type <maml:computerOutputInline>remove selected server</maml:computerOutputInline>, and then press ENTER. Click <maml:computerOutputInline>yes</maml:computerOutputInline> to confirm the deletion of the server object.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In addition, you must delete the server object from the sites container: </maml:para>
<maml:para>CN=Servers,CN=<maml:replaceable>sitename</maml:replaceable>,CN=Sites,CN=Configuration,CN={<maml:replaceable>GUID</maml:replaceable>}</maml:para>
<maml:para>where <maml:replaceable>sitename</maml:replaceable> represents the name of the site in which the server object exists, and <maml:replaceable>GUID</maml:replaceable> represents the globally unique identifier (GUID) of the AD LDS instance.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Backup. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Recover</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the steps in the Recovery Wizard to specify the location of the source backup data and identify the specific backup from which you want to recover instance data.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select recovery type</maml:ui>, click <maml:ui>Files and folders</maml:ui>, and then click <maml:ui>Next.</maml:ui></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select items to recover</maml:ui>, browse to and select the folder containing the instance data files. By default, AD LDS database and log files are located in %ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename </maml:replaceable>where <maml:replaceable>instancename</maml:replaceable> is the AD LDS instance name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Specify recovery options</maml:ui>, click <maml:ui>Alternate location</maml:ui>, specify a temporary location for the recovered files, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To complete the restore, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At a command prompt, type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>%windir%\adam\adaminstall /adv</maml:computerOutputInline></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the steps in the Active Directory Lightweight Directory Services Setup Wizard.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Backup, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Backup</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For help with <maml:computerOutputInline>dsmgmt</maml:computerOutputInline>, at a <maml:computerOutputInline>dsmgmt</maml:computerOutputInline> prompt, type <maml:computerOutputInline>?</maml:computerOutputInline>, and then press ENTER.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you accidentally start a restore of an AD LDS instance over a currently running AD LDS instance, we recommend that you immediately restart the computer, stop the AD LDS instance, and then perform the restoration again.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instance Backup and Restore</maml:linkText><maml:uri href="mshelp://windows/?id=7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Back Up AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=ed463518-ce97-4eb5-89b9-ec4d958edb53"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Start, Stop, or Restart an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e153d38c-6dfb-4ae4-8b39-d22fd4f79e79"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89az p , z 048<< @@@ DDDH HL L L P(P ] a e,U$Y0Y(] e0]mPYq q0ai8a u8a<a@eq 8m<mu HmLm y @uPq PuHy,} UyUy YyY}L]}PaaeU@ie m$qLauy0ʉ(y8}i}@am⅝qL҉uꑥqUҍ֑ }a֕ @mڪ]ڝډβ}<ޝꪾ@ޅޮaޮ H*\ȰÇ#JHŋ3jȱǏ C Iɓ(S\ɲ˗ (kiϟ@
5S N"ЧPJjAj:ׯ`QZٲY]˶[ce:7ۻxJչS.ݿN L0I3'=Tǐ#cTδ=f̹ϠC MӨS^ͺװW* %r0 R^>ڶqK NnL)l÷6WLPES՚OW?KPXX2x eSbѵ]M)X Q ձ^@xs3$(+(
&)
S3x@%X7 !Y1X$F90p Au!ĐE' 83J\v`((Xyw ]"^QٴUUFtC
PBYԲ?L .[裐F'47SK Qo%D<RcE^A
?@+H뮼+\=t
Gk6QήJ9yĀo4 <@K+\b"˥µID+m c &-CØ1Y9~B[58 d'#+D41]o b ,*Lc6`` 1a0'Ĉ
3@<<.*͐O0<16Q[ js3lջ~4tҫǾ=3
pǭ+&@cO0M|Q$M6s y3. ˭⏪;yD<Xqq 9騋)4G>] Q'6B @Su'Ljf4 $fX 7c
| 7ПNZ O.G=TK=ğGx4u5A@ 萾 Px8hO2UbC$ִb;7H E=1A8* ` L)5 ( ,W2Q=
:A :QYTF A9Ǜ`as xzp#c? M@ m~Vt; pg 4фk.wu p.L; Q5 obP oBn\x@ G~( O v<xB
'h@<ihw8c[. :(zE9 :p- }h3M0S x7i5:|7Ap7> &q*49Iop 6y#,2O~4È B= H`RNF*.bȂ"P
t O3-iI9x4711x5@ t*Х79& Xb*킪 *p_T^&hQTLC aP$Mz_|&bJj1 O[}Hx+S?!"WhFT83/a (8xz! ml\ЊiJ_pkQl" +( !ConU3\+
\>4Gr7\*uopo0tU.я* ()I 0:_Pb K軃mC]~_1$ _́\pC 9E.*) 0wdơ Xp\`z" d7&c&(ñrw\24L(*/30\/!9-ʳJ9І4A bf,(J Pj4b j
0&>LTLՁj,q`ѐD PEz|m[yvLa9f穄kH-
§] jCea3jZ(r k\ ވNxEY"4&8<~{lj]^A
SqU] TC>>Ћ @ g~[ ҿ.;3.&".jSZ@G/ q00]'rK @ܐȟ )< Pg G{=p* !p =IGr`
)lۿ~K 0t ];Vy\R2L9(>p͍<{;ф wa;&w] }{,Vt'-^6Ќ3U"`>(Ĭs3d Q֢k "P߇eO`` L/ |&>Ȭ3[r2z ~9F~e~_Q4Ȱq8jZwn5P
ϷYP * %
sV"w)P8~mOs Xp 8 f' U70v O2 $f #ʥ%flq` Wn:FyNׅ^ ưszq
0 t/0JMNM-Vx5jgsp0 Ј`RhoEvw5
q Oth% ׇaAjP@ [W~>@5oq#zh3 }VZP R7|, ^Ѝsd2z|gGzdvho&l玾
!PB9nŌ^_ @pOm}30
?{Hawlvssdov8.@
(i ZD
Tu?f -
9DrᨑoXovo7
RD{%i@
@ T&@u =46ye:Ighv>gv)Eɋ 90pOC&i
9d{g =K0`cT* Pk9hI7oIFI4r0X!$`
| 8n#
뇍8 f(lAgHss 8@jH@_ @ @ GaI H? 0 @!1 s4 `plxѕ%E !pڠ
Ԁ!%@`pQ
*şoQ0 ٗ
ʠb X00,) oO@%@
ᠢl۹2bҜ aZxk tRD
pO
R^)1e i |p@A=iʦ%!1 { iB=@0P%PJ Aj@ʥaP U@(]Z2r7vx
$1(Rʆѝ
f :0%x~R:
xW*!Mp&nz1 !j `JڬڠT VX2! w*{ z@u :+
s^>aZ7RT
9; p5_TpV"ክ? 4 :J80p`]a *fK}Ikn˴Ps@~@
˵]#:yi jmo;N몟˹W2BPn![{S`;[{țʻۼ ^ºk*dG Q !d;[{蛾껾+۹Q)
@ зx`Ck% ^C:{Q6`˞B
q[ CT`%EZE @ P yO+{ ?Y$?H-2
stʱC<]9 ఞ2w0KuAZUЁ O5 = ^ KA:"; [b"3|SMǷTW4%ȒH`G;D 1d<Q| C PBW ZτɞOoq a\ʕD
@@` J%˅vzfȿ|PG
̃\ {ye,P3D`B< -B̄
OP=M0,nP f-sxofWzz92t XMa )b"% p>dћ Nѣo(E ɼ+az T]V}XZ\TM6%^ 1P Pqn{Dy=8B|ѕ1`~׀ =] 0D؎ؐ ْ=ٔ]ٖ}َ ؚMِmH! "ZQ:lnqmȉԽk#Pl OR<#@ڦ%| Vpfڱ=,pi۵krCM]C 0}5ܧ%^ -Rݦtmqrs}ܭ { ^@|z3ma߇UPTTJ`
nmԛIך)
=R~ Il<pU6 >.f"=h#MW3
z>/ /5^<7 `7 0= w -!ΦA-7^s 9`PR@ `
?e( ]!T@t2Hp6ڛ@ Ѓ.XK~-O"S>r:#9-\= O>*=mP ' 95Qۛ.=ޏ>NpNΦwס7ಎrȮ\ Z L N~?A_
}ꦜ"cix 'hߎno9hg#-7p0.ޢNl!%
@&o.C <CMʳ(?Æ /% 3_ ޞNɖ$
s { ]>˅\xr?t_v}
_9=@9p~΅8 9brjI<LMni/Fl~oЛdY%fg)G:+nN."+~Ӧ
T^PJ Mo>^/?e%
</) K0JU*lz
lϦ aGN%qTP@ >QD| ʼF>rAd
XdpJ-]tIlęSM!v+ OE E
/cW0>TÃ .lUk6 83H
$xVm] R= JW^VS VUȐ`.,8 i.Siw'^ХMcZfփ
D|UqkD P m iVFxmI\:&: 2~h]|c310GS9sFuk+ŮS:^ L9 ,i4c#p#'O? /Đ] ZAs%#gTPR1C x<1ȸ& !:D X쌤@U3x- X 碫R0$o L2" >{M?f ԩ:g?l=s6\{1c &{:+ 3SW ۬O gatJ0VJ )mϼ_*
gEvG:ȎYo%<<-GQG6+mz d+1IFFg} {6_F8jiO
~^y ([Rh% 5~Fl>z fiA2d9A3uQI.9K2df%j9`g2wxC~!?.g 2DjЂw. *l\rǗ=DB[''02ⅹE`g1fnJ s"~̞cȃ?94 X@tөFݸ8ca dr߽w߁^5x lÀ]5;z c|
^"7>])#bьw
~+ c4f0&` 46 |7
I (V (O\z.A: doBYbN -0~3B9ЀGZ ʵ9p@>A 0~pB9 "0YFEV+H##Ah`
@ |E\fЏI`(a " ] k+hhE1@qD H"A;AJm̝ "12 1Dqn@P+Pp!qH]jf8 I"1-l,:Yi96g2#*(YNЈKd$?Nb~5 4VH Tc$ # 1r1=
%CbGFk )B9}( g <QҔ@(6i@2L T
uLZs ڡ i_U RD433
rS 3,
q( Zd|[)@.AV%
b?p͐>3Fxի XdB Mhld'" E\ =C Eg 3a'k seEmi !ht@AFJ Y- p D\@\fHd,X,+^rf4υ1^" H!D ,R/
$_F8nb0_f7`P ?p/үo';|} #c$܈
@CƝ] b XԌ۳Q,Ą|OXN\xJOr3
d[F^Q b3TTT!0w 6h86+xg<.H hFS( lhJd )5FhN;\\iRd$; gL@cK=k`0 ,VgR #@ Ftf ] I a3H8P!! t &Q0AMu^6j%j"@.
Tt En#6>f3\z7A|S1}HZA)j8mr*y[~ro Җ(7 k?xW 5ЙI{4?K^SQMXRc72͚?{'~}ײo%d|oݵ.c]CFfI? 5џF'ς` T֯w } 66klDGovƧ9.Dϻt~Yc]05՞xӸ83"Y.eͻ|݇7/& *щ+ N7͏"3 9T6aې Ёʣ4 C}À`?*sX89@1.сs8M@wЃ4xC R(?h y=@wxTA0s3Lw+A{B怇.(7qi`{Ou0*0-9ӼK3@2(}0&Z,|3:õ6Í:<O8s 'T2;E?6D
;sトkCc<# Yxh !H24SD̫1AH?H/{Yp Mܸ= :>`pT(B[wcˉXş` Hw^t;ND;څk0*`TE=GtGýi<V8 3kHnMFOL<B`G@kSx 2=z}ȃ&x{x"<tNCF_m*<#@DI (h`hX,Uhr<ɣ?HNȇin|;hpgȂZ|(HEE2.?ok4Li؇T8&5 ȲK8ƌ5؆s]@K Yxo8H BX;"Ɣ mEa B;]rT.>4Mb#XP`oxWğQ_w0G8 -8`N.`ȂZix\LfWhg ˌ(` Ԫa! ȂNp8kx]C#AWxh 0h@(,(.s`&I>Ȃ?opgWLWxaxm,d.@eQR+.8dP]P,HZ
PR 5>UR P{ZP,OќQ `,ȃl+5x(3OQ,X%%%p2%&OQ,:}(8 (}?@
T (.(Ea(R82!(J RXQFT;mGP}TER5SETUUeVuWXYZ[\]^WMh$8i4|D8V@IVh_ե`E9b%ֽVd5C<kVU\CuC3֕#Wsv5u>rVKw2dgWgEyEuVp q>yE׀=Wzu]Vԅ؈Ta}uX{ ؍We؈mWm5م؎
YcYeqWMXjWXVX؏ْmؘؓ=e~dUX؉j}ěYק %U٭W=X>cچVڦׇnڝE;ڕVe֗ECڂXZ|gUb٥Ws\
\Uؤ[p4ɵ\mр ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Overview of AD LDS</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Introducing AD LDS</maml:title><maml:introduction>
<maml:para>For organizations that require flexible support for directory-enabled applications, Microsoft has developed Active Directory Lightweight Directory Services (AD LDS). AD LDS is a Lightweight Directory Access Protocol (LDAP) directory service.</maml:para>
<maml:para>AD LDS provides data storage and retrieval for directory-enabled applications, without the dependencies that are required for Active Directory Domain Services (AD DS). AD LDS provides much of the same functionality as AD DS, but it does not require the deployment of domains or domain controllers. You can run multiple instances of AD LDS concurrently on a single computer, with an independently managed schema for each AD LDS instance.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>What's new in AD LDS</maml:title><maml:introduction>
<maml:para>The following features are new to AD LDS in Windows Server 2008 R2:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The AD LDS server role</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Integration with AD DS</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Microsoft directory technologies</maml:title><maml:introduction>
<maml:para>With AD LDS, Microsoft provides a choice of directory services. Both AD LDS and AD DS build on the same core Microsoft directory service technologies, but they address different needs in an organization.</maml:para>
<maml:para>AD DS provides directory services for both the Windows server operating system and for directory-enabled applications. For the server operating system, AD DS stores critical information about the network infrastructure, users and groups, network services, and so on. In this role, AD DS must adhere to a single schema throughout an entire forest.</maml:para>
<maml:para>AD LDS provides directory services specifically for directory-enabled applications. AD LDS does not require or rely on AD DS domains or forests. However, in environments where AD DS exists, AD LDS can use AD DS for the authentication of Windows security principals.</maml:para>
<maml:para>AD LDS and AD DS can run concurrently in the same network. In addition, AD LDS can support both domain users and workgroup users simultaneously, as shown in the following illustration. </maml:para>
<maml:para><maml:embedObject><maml:objectUri href="mshelp://windows/?id=ab5b4bf9-29b7-4071-8340-f67408846212" mimeType="image/gif"><maml:summary>AD LDS and AD DS in a single network</maml:summary></maml:objectUri></maml:embedObject></maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Directory-enabled applications</maml:title><maml:introduction>
<maml:para>A directory-enabled application uses a directory, rather than (or in addition to) a database, flat file, or other data storage structure, to hold its data. Many off-the-shelf applications, as well as many custom applications, use a directory-enabled design. Examples of the types of applications that often use a directory-enabled design include customer relationship management (CRM) applications, human resource (HR) applications, and global address book applications.</maml:para>
<maml:para>Directory services (such as AD LDS) and relational databases both provide data storage and retrieval, but they differ in their optimization. Directory services are optimized for read processing, while relational databases are optimized for transaction processing. In general, consider implementing a directory service if your application reads data more frequently than it writes data. Consider implementing a relational database if your application writes or modifies data more frequently than it reads data.</maml:para>
<maml:para>In addition, directory services also provide such benefits as distributed architecture (multimaster design, replication, and geographical scalability); storage of identity data that is common to applications and platforms throughout an enterprise; flexible data schema; and fine-grained access policies.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Back Up or Restore an AD LDS Instance</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>By default, each instance of Active Directory Lightweight Directory Services (AD LDS) that is running on an AD LDS server stores its database file and the associated log files in an instance-specific directory. Include these files as part of the regular backup plan of your organization. You can back up the directory using Windows Server Backup or another backup utility.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD LDS instances.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Read about backing up and restoring AD LDS instances.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instance Backup and Restore</maml:linkText><maml:uri href="mshelp://windows/?id=7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Run Windows Server Backup.</maml:para>
<maml:para>If you are backing up an instance, ensure that the instance that you intend to back up is running. If you are restoring an instance, ensure that the instance is stopped. Use the Services snap-in to start or stop an AD LDS instance.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Back Up AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=ed463518-ce97-4eb5-89b9-ec4d958edb53"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:navigationLink><maml:linkText>Restore AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Working with Authentication and Access Control</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>Access control in Active Directory Lightweight Directory Services (AD LDS) consists of two parts. First, AD LDS authenticates the identity of users requesting access to the directory, allowing only successfully authenticated users into the directory. Second, AD LDS uses security descriptors, called access control lists (ACLs), on directory objects to determine to which objects an authenticated user has access. </maml:para>
<maml:para>Users, or security principals, request directory data from AD LDS through directory-enabled applications, which in turn make requests to AD LDS using Lightweight Directory Access Protocol (LDAP). Before making a request for data, the directory-enabled application must present the user's credentials to AD LDS for authentication, or binding. This request includes a user name, password, and—depending on the type of bind—a domain name or computer name.</maml:para>
<maml:para>AD LDS can accept authentication, or bind, requests from both AD LDS security principals and Windows (local and domain) security principals. AD LDS security principals are authenticated directly by AD LDS. Local Windows security principals are authenticated by the local computer. Domain security principals must be authenticated by an Active Directory Domain Services (AD DS) domain controller.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Synchronize with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=042987f0-b2ba-4d5a-aa65-0e0b1a92362d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add an AD LDS User to the Directory</maml:linkText><maml:uri href="mshelp://windows/?id=e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add an AD LDS Group to the Directory</maml:linkText><maml:uri href="mshelp://windows/?id=c77f5e81-212e-47ab-b4ea-f5ac82f2b026"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add or Remove Members to or from an AD LDS Group</maml:linkText><maml:uri href="mshelp://windows/?id=9bbcb7e7-8db2-405f-a9d8-93022e535747"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>View or Set Permissions on a Directory Object</maml:linkText><maml:uri href="mshelp://windows/?id=1eb8c26e-2bdf-49cf-94b4-4284c6770892"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Disable or Enable an AD LDS User</maml:linkText><maml:uri href="mshelp://windows/?id=3d1bcd6a-3e51-4be2-a911-a3e83d1b2496"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Set or Modify the Password of an AD LDS User</maml:linkText><maml:uri href="mshelp://windows/?id=999967cd-9f18-44c5-8d80-347343cac9d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add an Organizational Unit to the Directory</maml:linkText><maml:uri href="mshelp://windows/?id=fd35c067-aeb1-45d3-b3be-8185a6b754c6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Active Directory Lightweight Directory Services</maml:linkText><maml:uri href="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Start, Stop, or Restart an AD LDS Instance</maml:title><maml:introduction>
<maml:para>An Active Directory Lightweight Directory Services (AD LDS) instance runs as a service. Therefore, you can start, stop, and restart an AD LDS instance using the same methods as you use for other services running on Windows Server 2008 R2.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Starting, stopping, or restarting an AD LDS instance</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the graphical user interface</maml:linkText><maml:uri href="mshelp://windows/?id=e153d38c-6dfb-4ae4-8b39-d22fd4f79e79#BKMK_gui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the command prompt</maml:linkText><maml:uri href="mshelp://windows/?id=e153d38c-6dfb-4ae4-8b39-d22fd4f79e79#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="BKMK_gui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To start, stop, or restart an AD LDS instance using the graphical user interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Server Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, double-click <maml:ui>Roles</maml:ui>, and then click <maml:ui>Active Directory Lightweight Directory Services</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, in the <maml:ui>System Services</maml:ui> list, click the AD LDS instance that you want to manage.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Start</maml:ui>, <maml:ui>Stop</maml:ui>, or <maml:ui>Restart</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open the <maml:ui>Server Manager</maml:ui> snap-in, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Server Manager</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, an AD LDS instance is configured to start automatically.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To start or stop an AD LDS instance using a command prompt</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To start an AD LDS instance, at the command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>net start</maml:computerOutputInline> <maml:replaceable>instance_name</maml:replaceable></maml:para>
<maml:para>where <maml:replaceable>instance_name</maml:replaceable> represents the AD LDS instance that you want to start.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To stop an AD LDS instance, at the command prompt, type the following command, and then press ENTER:</maml:para>
<maml:para><maml:computerOutputInline>net stop</maml:computerOutputInline> <maml:replaceable>instance_name</maml:replaceable></maml:para>
<maml:para>where <maml:replaceable>instance_name</maml:replaceable> represents the AD LDS instance that you want to stop.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open a command prompt, click <maml:ui>Start</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You cannot pause or resume an AD LDS instance from a command prompt.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, an AD LDS instance is configured to start automatically.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For more information about the <maml:computerOutputInline>net</maml:computerOutputInline> command, type <maml:computerOutputInline>net /?</maml:computerOutputInline> at a command prompt or see Help and Support.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Service Account Selection</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Service Account Selection</maml:ui> page in the Active Directory Lightweight Directory Services Setup Wizard, you must select a service account for use by this instance of Active Directory Lightweight Directory Services (AD LDS). The account that you select determines the security context in which the AD LDS instance runs. Changing the service account after installation may require some additional configuration.</maml:para>
<maml:para>In most cases, the Active Directory Lightweight Directory Services Setup Wizard defaults to the Network Service account as the service account. The Network Service account is a special, built-in account, with authority similar to the authority of an authenticated user account. </maml:para>
<maml:para>The name of the account is NT AUTHORITY\NetworkService. The Network Service account has limited access to the local computer. It has authenticated access, as the computer account, to network resources. This limited access helps safeguard your system if individual services or processes are compromised. Services that run as the Network Service account access network resources using the credentials of the computer account.</maml:para>
<maml:alertSet class="note"><maml:title>Notes </maml:title><maml:alert>To enable auditing for an AD LDS instance that runs under a service account other than the Network Service account, you must grant the <maml:phrase>Generate security audits</maml:phrase> right to the account that is used as the AD LDS service account.</maml:alert><maml:alert>To enable a workstation or domain user account as a service account, you must grant the <maml:phrase>Log on as a service</maml:phrase> right to the account that is used as the AD LDS service account.</maml:alert></maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use Ldp.exe to Manage an AD LDS Instance</maml:title><maml:introduction>
<maml:para>Ldp.exe is a graphical user interface (GUI) tool for general administration of a Lightweight Directory Access Protocol (LDAP) directory service. To use Ldp.exe to administer an Active Directory Lightweight Directory Services (AD LDS) instance, you must connect and bind to the instance and then display the hierarchy (tree) of a distinguished name of the instance. You can then browse to an object in the tree and right-click the object to administer it.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To view the contents of an AD LDS instance using Ldp.exe</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Ldp.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Connection</maml:ui> menu, click <maml:ui>Connect</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Server</maml:ui>, type the Domain Name System (DNS) name, NetBIOS name, or IP address of the computer on which the AD LDS instance is running.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Port</maml:ui>, type the LDAP or Secure Sockets Layer (SSL) communication port number that the AD LDS instance to which you want to connect is using, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Connection</maml:ui> menu, click <maml:ui>Bind</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To bind using the credentials that you logged on with, click <maml:ui>Bind as currently logged on user</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To bind using a domain user account, click <maml:ui>Bind with credentials</maml:ui>, type the user name, password, and domain name (or the computer name, if you are using a local workstation account) of the account that you are using, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To bind using just a user name and password, click <maml:ui>Simple bind</maml:ui>, type the user name and password of the account that you are using, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To bind using an advanced method (NTLM, Distributed Password Authentication (DPA), negotiate, or digest), click <maml:ui>Advanced (</maml:ui><maml:replaceable>method</maml:replaceable><maml:ui>)</maml:ui>, click <maml:ui>Advanced</maml:ui>, in <maml:ui>Method</maml:ui> select the desired method, set other options as needed, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>When you are finished specifying the bind options, click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>View</maml:ui> menu, click <maml:ui>Tree</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>BaseDN</maml:ui> list, click the distinguished name of the object to use as the base object in the navigation pane.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Ldp, click <maml:ui>Start</maml:ui>, point to <maml:ui>Run</maml:ui>, type <maml:userInput>ldp</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The default communication port for LDAP is 389. The default communication port for SSL is 636.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To connect to an AD LDS instance running on the local computer, type <maml:userInput>localhost</maml:userInput> as the server name.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instances</maml:linkText><maml:uri href="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding the AD LDS Schema</maml:linkText><maml:uri href="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add an AD LDS User to the Directory</maml:title><maml:introduction>
<maml:para>You can administer users and groups in Active Directory Lightweight Directory Services (AD LDS) through the ADSI Edit snap-in or through your directory-enabled applications. For information about users and groups in AD LDS, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>To create users in AD LDS, you must first import the optional user classes that are provided with AD LDS into the AD LDS schema. These user classes are provided in importable .ldf files, which you can find in the directory %windir%\adam on the computer where AD LDS is installed. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an AD LDS user to the directory</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the AD LDS instance and directory partition to which you want to add a user. For more information, see <maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, double-click the directory partition to which you want to add the user.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the container to which you want to add the user, point to <maml:ui>New</maml:ui>, and then click <maml:ui>Object</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select a class</maml:ui>, click the class that you want to use (<maml:ui>user</maml:ui>, <maml:ui>inetOrgPerson</maml:ui>, <maml:ui>person</maml:ui>, or <maml:ui>OrganizationalPerson</maml:ui>), and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Value</maml:ui>, type a value for the common name (CN) attribute of the new user, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If you want to set values for additional attributes, click <maml:ui>More attributes</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After setting any additional attributes for the new user, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, an AD LDS user account is enabled when the user account is created. However, no initial password is set on an AD LDS user account that is created with ADSI Edit. On AD LDS instances running on Windows Server 2008 R2, where local or domain password policy restrictions are in effect, the AD LDS user account is disabled by default. Before you can enable the user account, you must set a password for it that meets the password policy restrictions that are in effect. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Any object class can be used as a security principal in AD LDS, if the object class definition contains the <maml:phrase>SecurityPrincipal</maml:phrase> static auxiliary class and the <maml:phrase>unicodePwd</maml:phrase> attribute.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The <maml:phrase>user</maml:phrase>, <maml:phrase>inetOrgPerson</maml:phrase>, and <maml:phrase>OrganizationalPerson</maml:phrase> object classes are not available until you import the AD LDS user class definitions into the schema. </maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add an AD LDS User to the Directory (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137802</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137802"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Import the User Classes That Are Supplied with AD LDS</maml:linkText><maml:uri href="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Set or Modify the Password of an AD LDS User</maml:linkText><maml:uri href="mshelp://windows/?id=999967cd-9f18-44c5-8d80-347343cac9d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Back Up AD LDS Instance Data</maml:title><maml:introduction>
<maml:para>Active Directory Lightweight Directory Services (AD LDS) instance data is stored in a set of files that is contained in a folder with the same name as the instance. By default, AD LDS database and log files are located in %ProgramFiles%\Microsoft ADAM\<maml:replaceable>instancename </maml:replaceable>where <maml:replaceable>instancename</maml:replaceable> equals the AD LDS instance name. You back up AD LDS instance data by backing up (copying) these files. </maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>Before you back up the AD LDS folder of an instance, use the Services snap-in to confirm that the instance is started. To start Services, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Services</maml:ui>. Because the instance service must be running when the files are backed up, you must use a backup utility (such as Windows Server Backup) that can back up open files.</maml:para>
</maml:alertSet>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To back up an AD LDS instance using Windows Server Backup</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Backup</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Backup once</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the Backup Once Wizard, click <maml:ui>Different options</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Custom</maml:ui>, and then click <maml:ui>Next</maml:ui>. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select the volume that contains the AD LDS database and log files. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Complete the wizard to begin the backup operation.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:alertSet class="caution"><maml:title>Caution </maml:title>
<maml:para>If you backed up data from an NTFS file system volume, it is recommended that you restore the data to an NTFS volume of the same version to prevent loss of data.</maml:para>
</maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Instances</maml:linkText><maml:uri href="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Instance Backup and Restore</maml:linkText><maml:uri href="mshelp://windows/?id=7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Start, Stop, or Restart an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e153d38c-6dfb-4ae4-8b39-d22fd4f79e79"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restore AD LDS Instance Data</maml:linkText><maml:uri href="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create an Application Directory Partition</maml:title><maml:introduction>
<maml:para>You use Ldp.exe to add a new application directory partition to an existing instance of Active Directory Lightweight Directory Services (AD LDS).</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an application directory partition to an existing AD LDS instance</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open LDP, and then connect and bind to an AD LDS instance. For more information, see use <maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Browse</maml:ui> menu, click <maml:ui>Add child</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Dn</maml:ui>, type a distinguished name for the application partition.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Under <maml:ui>Edit entry</maml:ui>, type <maml:userInput>ObjectClass</maml:userInput> in the <maml:ui>Attribute</maml:ui> box and <maml:userInput>container</maml:userInput> in the <maml:ui>Values</maml:ui> box, and then click <maml:ui>Enter</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Under <maml:ui>Edit entry</maml:ui>, type <maml:userInput>instanceType</maml:userInput> in the <maml:ui>Attribute</maml:ui> box and <maml:userInput>5</maml:userInput> in the <maml:ui>Values</maml:ui> box, and then click <maml:ui>Enter</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Run</maml:ui>. </maml:para>
<maml:para>After the new application directory partition is added, the following information appears in the details pane:</maml:para>
<maml:para>Added {<maml:replaceable>distinguished name</maml:replaceable>}</maml:para>
<maml:para>where <maml:replaceable>distinguished name</maml:replaceable> is the distinguished name that you typed in step 3.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Close</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open Ldp, click <maml:ui>Start</maml:ui>, point to <maml:ui>Run</maml:ui>, type <maml:userInput>ldp</maml:userInput>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Application directory partitions can be of any object class, but they must have a value of <maml:phrase>5</maml:phrase> for the <maml:phrase>instanceType</maml:phrase> attribute.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=4fd8db90-43e2-4b3b-85f8-af92aab5249c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Directory Partitions</maml:linkText><maml:uri href="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use Ldp.exe to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Ldp</maml:linkText><maml:uri href="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Application Directory Partition</maml:title><maml:introduction>
<maml:para>On the <maml:ui>Application Directory Partition</maml:ui> page, you can create a new application directory partition during setup for Active Directory Lightweight Directory Services (AD LDS). An application directory partition holds data that is specific to one or more directory-enabled applications. The Active Directory Lightweight Directory Services Setup Wizard does not require that you create an application directory partition. You can also create application directory partitions anytime after you create an AD LDS instance.</maml:para>
<maml:para>If you choose to create an application directory partition, you must specify a distinguished name for the new partition. AD LDS supports both X.500-style and Domain Name System (DNS)–style distinguished names. When you specify an application partition in AD LDS, you can use any of the distinguished name attribute types in the following table. You must include at least one attribute in the distinguished name that you specify.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Distinguished name attribute</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Type</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>C</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Country/region</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>CN</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Container</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DC</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Domain component</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>L</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Locality</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>O</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Organization</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>OU</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Organizational unit</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>Example:</maml:para>
<maml:para>CN=Partition1,DC=Woodgrove,DC=COM</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>If you want to add organizational unit (OU) containers in your application directory partition, limit the distinguished name that you specify to the following object classes: OU, C, O, and DC. By default, OUs can be added only under these object classes. For example, you can add an OU to o=Microsoft,c=US. You cannot add an OU to cn=test,o=Microsoft,c=US.</maml:para>
</maml:alertSet>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>User Interface: Active Directory Lightweight Directory Services Setup Wizard</maml:linkText><maml:uri href="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085"></maml:uri></maml:navigationLink></maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add an Organizational Unit to the Directory</maml:title><maml:introduction>
<maml:para>To keep your Active Directory Lightweight Directory Services (AD LDS) users and groups organized, you may want to place users and groups in organizational units (OUs). In Active Directory Domain Services (AD DS) and in AD LDS, as well as in other Lightweight Directory Access Protocol (LDAP)-based directories, OUs are the most commonly used method for keeping users and groups organized.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition. For more information about AD LDS groups, see <maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an OU to the directory</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open ADSI Edit.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Connect and bind to the directory partition of the AD LDS instance to which you want to add an OU. For more information, see <maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, double-click the directory partition, right-click the container to which you want to add the OU, point to <maml:ui>New</maml:ui>, and then click <maml:ui>Object</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Select a class</maml:ui>, click <maml:ui>organizationalUnit</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Value</maml:ui>, type a name for the new OU, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If you want to set values for additional attributes, click <maml:ui>More attributes</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After you set all desired attributes for the new OU, click <maml:ui>Finish</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open ADSI Edit, on a computer with the AD LDS server role installed, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>ADSI Edit</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, OUs can be added only under <maml:phrase>OU (OU=)</maml:phrase>, <maml:phrase>country/region (C=)</maml:phrase>, <maml:phrase>organization (O=)</maml:phrase>, or <maml:phrase>domain-DNS (DC=)</maml:phrase> object classes. For example, you can add an OU to o=Microsoft,c=US. You cannot add an OU to cn=test,o=Microsoft,c=US. You can, however, update the schema definition of the <maml:phrase>OU</maml:phrase> object class to allow other superior object classes.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click <maml:ui>Start</maml:ui>, click <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>Active Directory Module for Windows PowerShell</maml:ui>. For more information, see Add an Organizational Unit to the Directory (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=137819</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=137819"></maml:uri></maml:navigationLink>). For more information about Windows PowerShell, see Windows PowerShell (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=102372</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=102372"></maml:uri></maml:navigationLink>).
</maml:para></maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Working with Authentication and Access Control</maml:linkText><maml:uri href="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use ADSI Edit to Manage an AD LDS Instance</maml:linkText><maml:uri href="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding AD LDS Users and Groups</maml:linkText><maml:uri href="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><?xml version="1.0" encoding="utf-8"?>
<HelpCollection Id="adam_LH" DTDVersion="1.0" FileVersion="" LangId="1033" Copyright="© 2005 Microsoft Corporation. All rights reserved." Title="Active Directory Lightweight Directory Services" xmlns="http://schemas.microsoft.com/help/collection/2004/11">
<CompilerOptions CompileResult="H1S" CreateFullTextIndex="Yes" BreakerId="Microsoft.NLG.en.WordBreaker">
<IncludeFile File="adam_LH.H1F" />
</CompilerOptions>
<TOCDef File="adam_LH.H1T" Id="adam_LH_TOC" />
<VTopicDef File="adam_LH.H1V" />
<KeywordIndexDef File="adam_LH_AssetId.H1K" />
<KeywordIndexDef File="adam_LH_BestBet.H1K" />
<KeywordIndexDef File="adam_LH_LinkTerm.H1K" />
<KeywordIndexDef File="adam_LH_SubjectTerm.H1K" />
<ItemMoniker Name="!DefaultTOC" ProgId="HxDs.HxHierarchy" InitData="AnyString" />
<ItemMoniker Name="!DefaultFullTextSearch" ProgId="HxDs.HxFullTextSearch" InitData="AnyString" />
<ItemMoniker Name="!DefaultAssetIdIndex" ProgId="HxDs.HxIndex" InitData="AssetId" />
<ItemMoniker Name="!DefaultBestBetIndex" ProgId="HxDs.HxIndex" InitData="BestBet" />
<ItemMoniker Name="!DefaultAssociativeIndex" ProgId="HxDs.HxIndex" InitData="LinkTerm" />
<ItemMoniker Name="!DefaultKeywordIndex" ProgId="HxDs.HxIndex" InitData="SubjectTerm" />
</HelpCollection><?xml version="1.0" encoding="utf-8"?>
<HelpFileList xmlns="http://schemas.microsoft.com/help/filelist/2004/11">
<File Url="assets\042987f0-b2ba-4d5a-aa65-0e0b1a92362d.xml" />
<File Url="relatedAssets\92183d99-a1a3-4949-b33d-1ea4a6e683ed.gif" />
<File Url="assets\0e83fa42-96c9-4558-827d-493c5c8301a7.xml" />
<File Url="assets\10d042cc-430f-4e9f-bc09-b3361ff1ad1a.xml" />
<File Url="assets\13afca07-9bcb-47fa-b686-22bbfdcfa7fb.xml" />
<File Url="relatedAssets\f0d05323-4cee-406a-9d1a-ad5083970d0f.gif" />
<File Url="assets\15df831c-0026-44e6-9838-eca31fc0cd12.xml" />
<File Url="assets\180087b1-342c-4ec4-9d3d-b806f2ab7290.xml" />
<File Url="assets\1d2ea13e-3698-459a-af3b-be41255715aa.xml" />
<File Url="assets\1eb8c26e-2bdf-49cf-94b4-4284c6770892.xml" />
<File Url="assets\2566f6bd-172e-451d-b4c2-61a8dd30fd3e.xml" />
<File Url="assets\26f03d1e-5a57-4cc9-a39e-2c082cd9597d.xml" />
<File Url="assets\2c20af4a-76c5-4b86-bdc9-a12ca9492085.xml" />
<File Url="assets\3878750b-49cb-4d30-b8c2-6947a3c2ac0f.xml" />
<File Url="assets\3d1bcd6a-3e51-4be2-a911-a3e83d1b2496.xml" />
<File Url="assets\40da08a3-0861-4666-bdae-1f49ff143414.xml" />
<File Url="assets\4121bfc9-6c68-4657-8d8d-90cb4c664c4c.xml" />
<File Url="assets\45ba077e-e529-4740-894e-26d8322a57a4.xml" />
<File Url="assets\46d1d997-1dff-451f-8c02-d82ade1ae81c.xml" />
<File Url="assets\4aed37e2-52c6-4b35-9db3-6bf8a4ba6051.xml" />
<File Url="assets\4fd8db90-43e2-4b3b-85f8-af92aab5249c.xml" />
<File Url="assets\517e9e1c-7060-4ad5-a542-f2915d15ebb1.xml" />
<File Url="relatedAssets\2ef24662-abcf-4d3a-b2fb-8fb71fe9494e.gif" />
<File Url="assets\58cf1c37-5f84-4459-8830-53d73c236924.xml" />
<File Url="assets\5f662b35-c775-4b92-bc46-fd1ce4f33206.xml" />
<File Url="assets\6caaf52f-4400-44e3-91e9-2d40b224b139.xml" />
<File Url="assets\7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3.xml" />
<File Url="assets\79f98741-9126-4cbc-be61-c26a4cb66ef3.xml" />
<File Url="assets\7c663266-87be-4e4a-bbeb-889da5eafbd4.xml" />
<File Url="assets\82f0d560-3e2c-441e-a3b3-ca3fa5b87380.xml" />
<File Url="assets\8a4c65da-20da-45a1-b3ed-de6f5a9c4412.xml" />
<File Url="assets\8a4ced66-9ef7-49d5-99fb-93a8d69ae50f.xml" />
<File Url="assets\8b3ee0f1-73d2-4066-99d9-529de6460244.xml" />
<File Url="assets\8cccc00d-b452-4109-a1a5-60e1af3af95e.xml" />
<File Url="assets\95fd3ac1-6fa7-4640-bca9-8651fb968e29.xml" />
<File Url="assets\999967cd-9f18-44c5-8d80-347343cac9d1.xml" />
<File Url="assets\9bbcb7e7-8db2-405f-a9d8-93022e535747.xml" />
<File Url="assets\9c257be0-d40b-4c59-8c67-6215f38c7edb.xml" />
<File Url="assets\a2976306-c63a-4131-8ce0-a3d295b5872c.xml" />
<File Url="assets\a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be.xml" />
<File Url="assets\a80a7df3-9afa-4600-be7e-f51503c8b7be.xml" />
<File Url="assets\ab5c668e-f30d-4e72-a0be-56066522d9e5.xml" />
<File Url="assets\abd379d1-9604-4558-9a3b-2871044d227f.xml" />
<File Url="assets\af887b8c-6594-476d-ae39-992580552c15.xml" />
<File Url="assets\b10f1377-722f-4a4f-9fb8-900f28695562.xml" />
<File Url="assets\b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd.xml" />
<File Url="assets\b8f537a7-443f-40c7-b176-bddb5c73d436.xml" />
<File Url="assets\c357a345-0375-4e7c-9a78-12a1db4f61d5.xml" />
<File Url="assets\c77f5e81-212e-47ab-b4ea-f5ac82f2b026.xml" />
<File Url="assets\cf574719-68d1-4aea-87de-e568fdd0b6a6.xml" />
<File Url="relatedAssets\ab5b4bf9-29b7-4071-8340-f67408846212.gif" />
<File Url="assets\d2b337b3-47e7-458c-b5a4-9e3d14a08078.xml" />
<File Url="assets\d3060406-b3d4-44a0-a63f-180164f4f387.xml" />
<File Url="assets\d4ee7dd8-1806-4876-9855-9174c4354dd8.xml" />
<File Url="assets\e153d38c-6dfb-4ae4-8b39-d22fd4f79e79.xml" />
<File Url="assets\e3d6fde7-470e-49dd-8477-37190bed38df.xml" />
<File Url="assets\e4ab883e-436e-4a98-8456-af15e66550d1.xml" />
<File Url="assets\e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6.xml" />
<File Url="assets\ed463518-ce97-4eb5-89b9-ec4d958edb53.xml" />
<File Url="assets\f43b2a3a-18ec-4f24-84d6-90df5a93c750.xml" />
<File Url="assets\fb629986-509c-4dcd-9e90-a04ab038b94d.xml" />
<File Url="assets\fd35c067-aeb1-45d3-b3be-8185a6b754c6.xml" />
</HelpFileList><?xml version="1.0" encoding="utf-8"?>
<VTopicSet DTDVersion="1.0" xmlns="http://schemas.microsoft.com/help/vtopic/2004/11">
<Vtopic Url="assets\042987f0-b2ba-4d5a-aa65-0e0b1a92362d.xml" RLTitle="Synchronize with Active Directory Domain Services">
<Attr Name="assetid" Value="042987f0-b2ba-4d5a-aa65-0e0b1a92362d" />
<Keyword Index="AssetId" Term="042987f0-b2ba-4d5a-aa65-0e0b1a92362d" />
<Keyword Index="AssetId" Term="042987f0-b2ba-4d5a-aa65-0e0b1a92362d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="042987f0-b2ba-4d5a-aa65-0e0b1a92362d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\92183d99-a1a3-4949-b33d-1ea4a6e683ed.gif">
<Keyword Index="AssetId" Term="92183d99-a1a3-4949-b33d-1ea4a6e683ed" />
</Vtopic>
<Vtopic Url="assets\0e83fa42-96c9-4558-827d-493c5c8301a7.xml" RLTitle="Understanding AD LDS Replication and Configuration Sets">
<Attr Name="assetid" Value="0e83fa42-96c9-4558-827d-493c5c8301a7" />
<Keyword Index="AssetId" Term="0e83fa42-96c9-4558-827d-493c5c8301a7" />
<Keyword Index="AssetId" Term="0e83fa42-96c9-4558-827d-493c5c8301a71033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0e83fa42-96c9-4558-827d-493c5c8301a7" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\10d042cc-430f-4e9f-bc09-b3361ff1ad1a.xml" RLTitle="Checklist: Manage Group Memberships">
<Attr Name="assetid" Value="10d042cc-430f-4e9f-bc09-b3361ff1ad1a" />
<Keyword Index="AssetId" Term="10d042cc-430f-4e9f-bc09-b3361ff1ad1a" />
<Keyword Index="AssetId" Term="10d042cc-430f-4e9f-bc09-b3361ff1ad1a1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="10d042cc-430f-4e9f-bc09-b3361ff1ad1a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\13afca07-9bcb-47fa-b686-22bbfdcfa7fb.xml" RLTitle="Create a New AD LDS Instance">
<Attr Name="assetid" Value="13afca07-9bcb-47fa-b686-22bbfdcfa7fb" />
<Keyword Index="AssetId" Term="13afca07-9bcb-47fa-b686-22bbfdcfa7fb" />
<Keyword Index="AssetId" Term="13afca07-9bcb-47fa-b686-22bbfdcfa7fb1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="13afca07-9bcb-47fa-b686-22bbfdcfa7fb" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\f0d05323-4cee-406a-9d1a-ad5083970d0f.gif">
<Keyword Index="AssetId" Term="f0d05323-4cee-406a-9d1a-ad5083970d0f" />
</Vtopic>
<Vtopic Url="assets\15df831c-0026-44e6-9838-eca31fc0cd12.xml" RLTitle="Understanding AD LDS Instances">
<Attr Name="assetid" Value="15df831c-0026-44e6-9838-eca31fc0cd12" />
<Keyword Index="AssetId" Term="15df831c-0026-44e6-9838-eca31fc0cd12" />
<Keyword Index="AssetId" Term="15df831c-0026-44e6-9838-eca31fc0cd121033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="15df831c-0026-44e6-9838-eca31fc0cd12" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\180087b1-342c-4ec4-9d3d-b806f2ab7290.xml" RLTitle="File Locations">
<Attr Name="assetid" Value="180087b1-342c-4ec4-9d3d-b806f2ab7290" />
<Keyword Index="AssetId" Term="180087b1-342c-4ec4-9d3d-b806f2ab7290" />
<Keyword Index="AssetId" Term="180087b1-342c-4ec4-9d3d-b806f2ab72901033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="180087b1-342c-4ec4-9d3d-b806f2ab7290" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1d2ea13e-3698-459a-af3b-be41255715aa.xml" RLTitle="Import Data into an AD LDS Instance">
<Attr Name="assetid" Value="1d2ea13e-3698-459a-af3b-be41255715aa" />
<Keyword Index="AssetId" Term="1d2ea13e-3698-459a-af3b-be41255715aa" />
<Keyword Index="AssetId" Term="1d2ea13e-3698-459a-af3b-be41255715aa1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1d2ea13e-3698-459a-af3b-be41255715aa" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1eb8c26e-2bdf-49cf-94b4-4284c6770892.xml" RLTitle="View or Set Permissions on a Directory Object">
<Attr Name="assetid" Value="1eb8c26e-2bdf-49cf-94b4-4284c6770892" />
<Keyword Index="AssetId" Term="1eb8c26e-2bdf-49cf-94b4-4284c6770892" />
<Keyword Index="AssetId" Term="1eb8c26e-2bdf-49cf-94b4-4284c67708921033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1eb8c26e-2bdf-49cf-94b4-4284c6770892" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2566f6bd-172e-451d-b4c2-61a8dd30fd3e.xml" RLTitle="Understanding Directory Partitions">
<Attr Name="assetid" Value="2566f6bd-172e-451d-b4c2-61a8dd30fd3e" />
<Keyword Index="AssetId" Term="2566f6bd-172e-451d-b4c2-61a8dd30fd3e" />
<Keyword Index="AssetId" Term="2566f6bd-172e-451d-b4c2-61a8dd30fd3e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2566f6bd-172e-451d-b4c2-61a8dd30fd3e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\26f03d1e-5a57-4cc9-a39e-2c082cd9597d.xml" RLTitle="AD LDS Administrators">
<Attr Name="assetid" Value="26f03d1e-5a57-4cc9-a39e-2c082cd9597d" />
<Keyword Index="AssetId" Term="26f03d1e-5a57-4cc9-a39e-2c082cd9597d" />
<Keyword Index="AssetId" Term="26f03d1e-5a57-4cc9-a39e-2c082cd9597d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="26f03d1e-5a57-4cc9-a39e-2c082cd9597d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2c20af4a-76c5-4b86-bdc9-a12ca9492085.xml" RLTitle="User Interface: Active Directory Lightweight Directory Services Setup Wizard">
<Attr Name="assetid" Value="2c20af4a-76c5-4b86-bdc9-a12ca9492085" />
<Keyword Index="AssetId" Term="2c20af4a-76c5-4b86-bdc9-a12ca9492085" />
<Keyword Index="AssetId" Term="2c20af4a-76c5-4b86-bdc9-a12ca94920851033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2c20af4a-76c5-4b86-bdc9-a12ca9492085" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3878750b-49cb-4d30-b8c2-6947a3c2ac0f.xml" RLTitle="Checklist: Create a Replica of an Existing AD LDS Instance">
<Attr Name="assetid" Value="3878750b-49cb-4d30-b8c2-6947a3c2ac0f" />
<Keyword Index="AssetId" Term="3878750b-49cb-4d30-b8c2-6947a3c2ac0f" />
<Keyword Index="AssetId" Term="3878750b-49cb-4d30-b8c2-6947a3c2ac0f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3878750b-49cb-4d30-b8c2-6947a3c2ac0f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3d1bcd6a-3e51-4be2-a911-a3e83d1b2496.xml" RLTitle="Disable or Enable an AD LDS User">
<Attr Name="assetid" Value="3d1bcd6a-3e51-4be2-a911-a3e83d1b2496" />
<Keyword Index="AssetId" Term="3d1bcd6a-3e51-4be2-a911-a3e83d1b2496" />
<Keyword Index="AssetId" Term="3d1bcd6a-3e51-4be2-a911-a3e83d1b24961033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3d1bcd6a-3e51-4be2-a911-a3e83d1b2496" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\40da08a3-0861-4666-bdae-1f49ff143414.xml" RLTitle="Adamsync">
<Attr Name="assetid" Value="40da08a3-0861-4666-bdae-1f49ff143414" />
<Keyword Index="AssetId" Term="40da08a3-0861-4666-bdae-1f49ff143414" />
<Keyword Index="AssetId" Term="40da08a3-0861-4666-bdae-1f49ff1434141033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="40da08a3-0861-4666-bdae-1f49ff143414" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4121bfc9-6c68-4657-8d8d-90cb4c664c4c.xml" RLTitle="AD LDS Administration Tools">
<Attr Name="assetid" Value="4121bfc9-6c68-4657-8d8d-90cb4c664c4c" />
<Keyword Index="AssetId" Term="4121bfc9-6c68-4657-8d8d-90cb4c664c4c" />
<Keyword Index="AssetId" Term="4121bfc9-6c68-4657-8d8d-90cb4c664c4c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4121bfc9-6c68-4657-8d8d-90cb4c664c4c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\45ba077e-e529-4740-894e-26d8322a57a4.xml" RLTitle="Checklist: Synchronize Data from AD DS to AD LDS">
<Attr Name="assetid" Value="45ba077e-e529-4740-894e-26d8322a57a4" />
<Keyword Index="AssetId" Term="45ba077e-e529-4740-894e-26d8322a57a4" />
<Keyword Index="AssetId" Term="45ba077e-e529-4740-894e-26d8322a57a41033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="45ba077e-e529-4740-894e-26d8322a57a4" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\46d1d997-1dff-451f-8c02-d82ade1ae81c.xml" RLTitle="Working with Instances">
<Attr Name="assetid" Value="46d1d997-1dff-451f-8c02-d82ade1ae81c" />
<Keyword Index="AssetId" Term="46d1d997-1dff-451f-8c02-d82ade1ae81c" />
<Keyword Index="AssetId" Term="46d1d997-1dff-451f-8c02-d82ade1ae81c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="46d1d997-1dff-451f-8c02-d82ade1ae81c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4aed37e2-52c6-4b35-9db3-6bf8a4ba6051.xml" RLTitle="Setup Options">
<Attr Name="assetid" Value="4aed37e2-52c6-4b35-9db3-6bf8a4ba6051" />
<Keyword Index="AssetId" Term="4aed37e2-52c6-4b35-9db3-6bf8a4ba6051" />
<Keyword Index="AssetId" Term="4aed37e2-52c6-4b35-9db3-6bf8a4ba60511033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4aed37e2-52c6-4b35-9db3-6bf8a4ba6051" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\4fd8db90-43e2-4b3b-85f8-af92aab5249c.xml" RLTitle="Working with Directory Partitions">
<Attr Name="assetid" Value="4fd8db90-43e2-4b3b-85f8-af92aab5249c" />
<Keyword Index="AssetId" Term="4fd8db90-43e2-4b3b-85f8-af92aab5249c" />
<Keyword Index="AssetId" Term="4fd8db90-43e2-4b3b-85f8-af92aab5249c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4fd8db90-43e2-4b3b-85f8-af92aab5249c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\517e9e1c-7060-4ad5-a542-f2915d15ebb1.xml" RLTitle="Copying Application Information">
<Attr Name="assetid" Value="517e9e1c-7060-4ad5-a542-f2915d15ebb1" />
<Keyword Index="AssetId" Term="517e9e1c-7060-4ad5-a542-f2915d15ebb1" />
<Keyword Index="AssetId" Term="517e9e1c-7060-4ad5-a542-f2915d15ebb11033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="517e9e1c-7060-4ad5-a542-f2915d15ebb1" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\2ef24662-abcf-4d3a-b2fb-8fb71fe9494e.gif">
<Keyword Index="AssetId" Term="2ef24662-abcf-4d3a-b2fb-8fb71fe9494e" />
</Vtopic>
<Vtopic Url="assets\58cf1c37-5f84-4459-8830-53d73c236924.xml" RLTitle="Understanding the AD LDS Schema">
<Attr Name="assetid" Value="58cf1c37-5f84-4459-8830-53d73c236924" />
<Keyword Index="AssetId" Term="58cf1c37-5f84-4459-8830-53d73c236924" />
<Keyword Index="AssetId" Term="58cf1c37-5f84-4459-8830-53d73c2369241033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="58cf1c37-5f84-4459-8830-53d73c236924" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5f662b35-c775-4b92-bc46-fd1ce4f33206.xml" RLTitle="Import LDIF Files">
<Attr Name="assetid" Value="5f662b35-c775-4b92-bc46-fd1ce4f33206" />
<Keyword Index="AssetId" Term="5f662b35-c775-4b92-bc46-fd1ce4f33206" />
<Keyword Index="AssetId" Term="5f662b35-c775-4b92-bc46-fd1ce4f332061033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5f662b35-c775-4b92-bc46-fd1ce4f33206" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6caaf52f-4400-44e3-91e9-2d40b224b139.xml" RLTitle="Install an AD LDS Replica from Media">
<Attr Name="assetid" Value="6caaf52f-4400-44e3-91e9-2d40b224b139" />
<Keyword Index="AssetId" Term="6caaf52f-4400-44e3-91e9-2d40b224b139" />
<Keyword Index="AssetId" Term="6caaf52f-4400-44e3-91e9-2d40b224b1391033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6caaf52f-4400-44e3-91e9-2d40b224b139" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3.xml" RLTitle="Understanding AD LDS Instance Backup and Restore">
<Attr Name="assetid" Value="7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3" />
<Keyword Index="AssetId" Term="7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3" />
<Keyword Index="AssetId" Term="7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\79f98741-9126-4cbc-be61-c26a4cb66ef3.xml" RLTitle="Ports">
<Attr Name="assetid" Value="79f98741-9126-4cbc-be61-c26a4cb66ef3" />
<Keyword Index="AssetId" Term="79f98741-9126-4cbc-be61-c26a4cb66ef3" />
<Keyword Index="AssetId" Term="79f98741-9126-4cbc-be61-c26a4cb66ef31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="79f98741-9126-4cbc-be61-c26a4cb66ef3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7c663266-87be-4e4a-bbeb-889da5eafbd4.xml" RLTitle="Csvde">
<Attr Name="assetid" Value="7c663266-87be-4e4a-bbeb-889da5eafbd4" />
<Keyword Index="AssetId" Term="7c663266-87be-4e4a-bbeb-889da5eafbd4" />
<Keyword Index="AssetId" Term="7c663266-87be-4e4a-bbeb-889da5eafbd41033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7c663266-87be-4e4a-bbeb-889da5eafbd4" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\82f0d560-3e2c-441e-a3b3-ca3fa5b87380.xml" RLTitle="Checklist: Create an Application Directory Partition">
<Attr Name="assetid" Value="82f0d560-3e2c-441e-a3b3-ca3fa5b87380" />
<Keyword Index="AssetId" Term="82f0d560-3e2c-441e-a3b3-ca3fa5b87380" />
<Keyword Index="AssetId" Term="82f0d560-3e2c-441e-a3b3-ca3fa5b873801033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="82f0d560-3e2c-441e-a3b3-ca3fa5b87380" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8a4c65da-20da-45a1-b3ed-de6f5a9c4412.xml" RLTitle="Import the User Classes That Are Supplied with AD LDS">
<Attr Name="assetid" Value="8a4c65da-20da-45a1-b3ed-de6f5a9c4412" />
<Keyword Index="AssetId" Term="8a4c65da-20da-45a1-b3ed-de6f5a9c4412" />
<Keyword Index="AssetId" Term="8a4c65da-20da-45a1-b3ed-de6f5a9c44121033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8a4c65da-20da-45a1-b3ed-de6f5a9c4412" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8a4ced66-9ef7-49d5-99fb-93a8d69ae50f.xml" RLTitle="Create a Replica AD LDS Instance">
<Attr Name="assetid" Value="8a4ced66-9ef7-49d5-99fb-93a8d69ae50f" />
<Keyword Index="AssetId" Term="8a4ced66-9ef7-49d5-99fb-93a8d69ae50f" />
<Keyword Index="AssetId" Term="8a4ced66-9ef7-49d5-99fb-93a8d69ae50f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8a4ced66-9ef7-49d5-99fb-93a8d69ae50f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8b3ee0f1-73d2-4066-99d9-529de6460244.xml" RLTitle="Checklist: Import Data from LDIF Files">
<Attr Name="assetid" Value="8b3ee0f1-73d2-4066-99d9-529de6460244" />
<Keyword Index="AssetId" Term="8b3ee0f1-73d2-4066-99d9-529de6460244" />
<Keyword Index="AssetId" Term="8b3ee0f1-73d2-4066-99d9-529de64602441033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8b3ee0f1-73d2-4066-99d9-529de6460244" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8cccc00d-b452-4109-a1a5-60e1af3af95e.xml" RLTitle="Ldifde">
<Attr Name="assetid" Value="8cccc00d-b452-4109-a1a5-60e1af3af95e" />
<Keyword Index="AssetId" Term="8cccc00d-b452-4109-a1a5-60e1af3af95e" />
<Keyword Index="AssetId" Term="8cccc00d-b452-4109-a1a5-60e1af3af95e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8cccc00d-b452-4109-a1a5-60e1af3af95e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\95fd3ac1-6fa7-4640-bca9-8651fb968e29.xml" RLTitle="ADSI Edit">
<Attr Name="assetid" Value="95fd3ac1-6fa7-4640-bca9-8651fb968e29" />
<Keyword Index="AssetId" Term="95fd3ac1-6fa7-4640-bca9-8651fb968e29" />
<Keyword Index="AssetId" Term="95fd3ac1-6fa7-4640-bca9-8651fb968e291033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="95fd3ac1-6fa7-4640-bca9-8651fb968e29" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\999967cd-9f18-44c5-8d80-347343cac9d1.xml" RLTitle="Set or Modify the Password of an AD LDS User">
<Attr Name="assetid" Value="999967cd-9f18-44c5-8d80-347343cac9d1" />
<Keyword Index="AssetId" Term="999967cd-9f18-44c5-8d80-347343cac9d1" />
<Keyword Index="AssetId" Term="999967cd-9f18-44c5-8d80-347343cac9d11033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="999967cd-9f18-44c5-8d80-347343cac9d1" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9bbcb7e7-8db2-405f-a9d8-93022e535747.xml" RLTitle="Add or Remove Members to or from an AD LDS Group">
<Attr Name="assetid" Value="9bbcb7e7-8db2-405f-a9d8-93022e535747" />
<Keyword Index="AssetId" Term="9bbcb7e7-8db2-405f-a9d8-93022e535747" />
<Keyword Index="AssetId" Term="9bbcb7e7-8db2-405f-a9d8-93022e5357471033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9bbcb7e7-8db2-405f-a9d8-93022e535747" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9c257be0-d40b-4c59-8c67-6215f38c7edb.xml" RLTitle="Use ADSI Edit to Manage an AD LDS Instance">
<Attr Name="assetid" Value="9c257be0-d40b-4c59-8c67-6215f38c7edb" />
<Keyword Index="AssetId" Term="9c257be0-d40b-4c59-8c67-6215f38c7edb" />
<Keyword Index="AssetId" Term="9c257be0-d40b-4c59-8c67-6215f38c7edb1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9c257be0-d40b-4c59-8c67-6215f38c7edb" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a2976306-c63a-4131-8ce0-a3d295b5872c.xml" RLTitle="Ldp">
<Attr Name="assetid" Value="a2976306-c63a-4131-8ce0-a3d295b5872c" />
<Keyword Index="AssetId" Term="a2976306-c63a-4131-8ce0-a3d295b5872c" />
<Keyword Index="AssetId" Term="a2976306-c63a-4131-8ce0-a3d295b5872c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a2976306-c63a-4131-8ce0-a3d295b5872c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be.xml" RLTitle="Instance Name">
<Attr Name="assetid" Value="a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be" />
<Keyword Index="AssetId" Term="a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be" />
<Keyword Index="AssetId" Term="a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a80a7df3-9afa-4600-be7e-f51503c8b7be.xml" RLTitle="Copy Application Directory Partitions">
<Attr Name="assetid" Value="a80a7df3-9afa-4600-be7e-f51503c8b7be" />
<Keyword Index="AssetId" Term="a80a7df3-9afa-4600-be7e-f51503c8b7be" />
<Keyword Index="AssetId" Term="a80a7df3-9afa-4600-be7e-f51503c8b7be1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a80a7df3-9afa-4600-be7e-f51503c8b7be" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ab5c668e-f30d-4e72-a0be-56066522d9e5.xml" RLTitle="Administering Directory Partitions">
<Attr Name="assetid" Value="ab5c668e-f30d-4e72-a0be-56066522d9e5" />
<Keyword Index="AssetId" Term="ab5c668e-f30d-4e72-a0be-56066522d9e5" />
<Keyword Index="AssetId" Term="ab5c668e-f30d-4e72-a0be-56066522d9e51033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ab5c668e-f30d-4e72-a0be-56066522d9e5" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\abd379d1-9604-4558-9a3b-2871044d227f.xml" RLTitle="Checklist: Create a New Instance of AD LDS">
<Attr Name="assetid" Value="abd379d1-9604-4558-9a3b-2871044d227f" />
<Keyword Index="AssetId" Term="abd379d1-9604-4558-9a3b-2871044d227f" />
<Keyword Index="AssetId" Term="abd379d1-9604-4558-9a3b-2871044d227f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="abd379d1-9604-4558-9a3b-2871044d227f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\af887b8c-6594-476d-ae39-992580552c15.xml" RLTitle="Administrative Credentials for the Configuration Set">
<Attr Name="assetid" Value="af887b8c-6594-476d-ae39-992580552c15" />
<Keyword Index="AssetId" Term="af887b8c-6594-476d-ae39-992580552c15" />
<Keyword Index="AssetId" Term="af887b8c-6594-476d-ae39-992580552c151033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="af887b8c-6594-476d-ae39-992580552c15" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b10f1377-722f-4a4f-9fb8-900f28695562.xml" RLTitle="Active Directory Lightweight Directory Services">
<Attr Name="assetid" Value="b10f1377-722f-4a4f-9fb8-900f28695562" />
<Keyword Index="AssetId" Term="b10f1377-722f-4a4f-9fb8-900f28695562" />
<Keyword Index="AssetId" Term="b10f1377-722f-4a4f-9fb8-900f286955621033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b10f1377-722f-4a4f-9fb8-900f28695562" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd.xml" RLTitle="Ready to Install">
<Attr Name="assetid" Value="b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd" />
<Keyword Index="AssetId" Term="b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd" />
<Keyword Index="AssetId" Term="b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b8f537a7-443f-40c7-b176-bddb5c73d436.xml" RLTitle="Joining a Configuration Set">
<Attr Name="assetid" Value="b8f537a7-443f-40c7-b176-bddb5c73d436" />
<Keyword Index="AssetId" Term="b8f537a7-443f-40c7-b176-bddb5c73d436" />
<Keyword Index="AssetId" Term="b8f537a7-443f-40c7-b176-bddb5c73d4361033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b8f537a7-443f-40c7-b176-bddb5c73d436" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c357a345-0375-4e7c-9a78-12a1db4f61d5.xml" RLTitle="Understanding AD LDS Users and Groups">
<Attr Name="assetid" Value="c357a345-0375-4e7c-9a78-12a1db4f61d5" />
<Keyword Index="AssetId" Term="c357a345-0375-4e7c-9a78-12a1db4f61d5" />
<Keyword Index="AssetId" Term="c357a345-0375-4e7c-9a78-12a1db4f61d51033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c357a345-0375-4e7c-9a78-12a1db4f61d5" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c77f5e81-212e-47ab-b4ea-f5ac82f2b026.xml" RLTitle="Add an AD LDS Group to the Directory">
<Attr Name="assetid" Value="c77f5e81-212e-47ab-b4ea-f5ac82f2b026" />
<Keyword Index="AssetId" Term="c77f5e81-212e-47ab-b4ea-f5ac82f2b026" />
<Keyword Index="AssetId" Term="c77f5e81-212e-47ab-b4ea-f5ac82f2b0261033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c77f5e81-212e-47ab-b4ea-f5ac82f2b026" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\cf574719-68d1-4aea-87de-e568fdd0b6a6.xml" RLTitle="Restore AD LDS Instance Data">
<Attr Name="assetid" Value="cf574719-68d1-4aea-87de-e568fdd0b6a6" />
<Keyword Index="AssetId" Term="cf574719-68d1-4aea-87de-e568fdd0b6a6" />
<Keyword Index="AssetId" Term="cf574719-68d1-4aea-87de-e568fdd0b6a61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="cf574719-68d1-4aea-87de-e568fdd0b6a6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\ab5b4bf9-29b7-4071-8340-f67408846212.gif">
<Keyword Index="AssetId" Term="ab5b4bf9-29b7-4071-8340-f67408846212" />
</Vtopic>
<Vtopic Url="assets\d2b337b3-47e7-458c-b5a4-9e3d14a08078.xml" RLTitle="Overview of AD LDS">
<Attr Name="assetid" Value="d2b337b3-47e7-458c-b5a4-9e3d14a08078" />
<Keyword Index="AssetId" Term="d2b337b3-47e7-458c-b5a4-9e3d14a08078" />
<Keyword Index="AssetId" Term="d2b337b3-47e7-458c-b5a4-9e3d14a080781033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d2b337b3-47e7-458c-b5a4-9e3d14a08078" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d3060406-b3d4-44a0-a63f-180164f4f387.xml" RLTitle="Checklist: Back Up or Restore an AD LDS Instance">
<Attr Name="assetid" Value="d3060406-b3d4-44a0-a63f-180164f4f387" />
<Keyword Index="AssetId" Term="d3060406-b3d4-44a0-a63f-180164f4f387" />
<Keyword Index="AssetId" Term="d3060406-b3d4-44a0-a63f-180164f4f3871033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d3060406-b3d4-44a0-a63f-180164f4f387" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d4ee7dd8-1806-4876-9855-9174c4354dd8.xml" RLTitle="Working with Authentication and Access Control">
<Attr Name="assetid" Value="d4ee7dd8-1806-4876-9855-9174c4354dd8" />
<Keyword Index="AssetId" Term="d4ee7dd8-1806-4876-9855-9174c4354dd8" />
<Keyword Index="AssetId" Term="d4ee7dd8-1806-4876-9855-9174c4354dd81033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d4ee7dd8-1806-4876-9855-9174c4354dd8" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e153d38c-6dfb-4ae4-8b39-d22fd4f79e79.xml" RLTitle="Start, Stop, or Restart an AD LDS Instance">
<Attr Name="assetid" Value="e153d38c-6dfb-4ae4-8b39-d22fd4f79e79" />
<Keyword Index="AssetId" Term="e153d38c-6dfb-4ae4-8b39-d22fd4f79e79" />
<Keyword Index="AssetId" Term="e153d38c-6dfb-4ae4-8b39-d22fd4f79e791033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e153d38c-6dfb-4ae4-8b39-d22fd4f79e79" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e3d6fde7-470e-49dd-8477-37190bed38df.xml" RLTitle="Service Account Selection">
<Attr Name="assetid" Value="e3d6fde7-470e-49dd-8477-37190bed38df" />
<Keyword Index="AssetId" Term="e3d6fde7-470e-49dd-8477-37190bed38df" />
<Keyword Index="AssetId" Term="e3d6fde7-470e-49dd-8477-37190bed38df1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e3d6fde7-470e-49dd-8477-37190bed38df" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e4ab883e-436e-4a98-8456-af15e66550d1.xml" RLTitle="Use Ldp.exe to Manage an AD LDS Instance">
<Attr Name="assetid" Value="e4ab883e-436e-4a98-8456-af15e66550d1" />
<Keyword Index="AssetId" Term="e4ab883e-436e-4a98-8456-af15e66550d1" />
<Keyword Index="AssetId" Term="e4ab883e-436e-4a98-8456-af15e66550d11033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e4ab883e-436e-4a98-8456-af15e66550d1" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6.xml" RLTitle="Add an AD LDS User to the Directory">
<Attr Name="assetid" Value="e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6" />
<Keyword Index="AssetId" Term="e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6" />
<Keyword Index="AssetId" Term="e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ed463518-ce97-4eb5-89b9-ec4d958edb53.xml" RLTitle="Back Up AD LDS Instance Data">
<Attr Name="assetid" Value="ed463518-ce97-4eb5-89b9-ec4d958edb53" />
<Keyword Index="AssetId" Term="ed463518-ce97-4eb5-89b9-ec4d958edb53" />
<Keyword Index="AssetId" Term="ed463518-ce97-4eb5-89b9-ec4d958edb531033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ed463518-ce97-4eb5-89b9-ec4d958edb53" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f43b2a3a-18ec-4f24-84d6-90df5a93c750.xml" RLTitle="Create an Application Directory Partition">
<Attr Name="assetid" Value="f43b2a3a-18ec-4f24-84d6-90df5a93c750" />
<Keyword Index="AssetId" Term="f43b2a3a-18ec-4f24-84d6-90df5a93c750" />
<Keyword Index="AssetId" Term="f43b2a3a-18ec-4f24-84d6-90df5a93c7501033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f43b2a3a-18ec-4f24-84d6-90df5a93c750" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\fb629986-509c-4dcd-9e90-a04ab038b94d.xml" RLTitle="Application Directory Partition">
<Attr Name="assetid" Value="fb629986-509c-4dcd-9e90-a04ab038b94d" />
<Keyword Index="AssetId" Term="fb629986-509c-4dcd-9e90-a04ab038b94d" />
<Keyword Index="AssetId" Term="fb629986-509c-4dcd-9e90-a04ab038b94d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="fb629986-509c-4dcd-9e90-a04ab038b94d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\fd35c067-aeb1-45d3-b3be-8185a6b754c6.xml" RLTitle="Add an Organizational Unit to the Directory">
<Attr Name="assetid" Value="fd35c067-aeb1-45d3-b3be-8185a6b754c6" />
<Keyword Index="AssetId" Term="fd35c067-aeb1-45d3-b3be-8185a6b754c6" />
<Keyword Index="AssetId" Term="fd35c067-aeb1-45d3-b3be-8185a6b754c61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="IdentityAndDirectoryServices_ADAM" />
<Attr Name="updatedDate" Value="2008/12/30" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="1748" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="fd35c067-aeb1-45d3-b3be-8185a6b754c6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
</VTopicSet><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpTOC>
<HelpTOC xmlns="http://schemas.microsoft.com/help/toc/2004/11" DTDVersion="1.0" Id="adam_LH_TOC" FileVersion="" LangId="1033" ParentNodeIcon="Book" PluginStyle="Hierarchical">
<HelpTOCNode Url="mshelp://windows/?tocid=e73bc132-4ba9-49f5-b110-c4b7940cd2fe" Title="">
<HelpTOCNode Url="mshelp://windows/?id=b10f1377-722f-4a4f-9fb8-900f28695562" Title="Active Directory Lightweight Directory Services">
<HelpTOCNode Url="mshelp://windows/?id=d2b337b3-47e7-458c-b5a4-9e3d14a08078" Title="Overview of AD LDS" />
<HelpTOCNode Url="mshelp://windows/?id=abd379d1-9604-4558-9a3b-2871044d227f" Title="Checklist: Create a New Instance of AD LDS" />
<HelpTOCNode Url="mshelp://windows/?id=3878750b-49cb-4d30-b8c2-6947a3c2ac0f" Title="Checklist: Create a Replica of an Existing AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=8b3ee0f1-73d2-4066-99d9-529de6460244" Title="Checklist: Import Data from LDIF Files" />
<HelpTOCNode Url="mshelp://windows/?id=82f0d560-3e2c-441e-a3b3-ca3fa5b87380" Title="Checklist: Create an Application Directory Partition" />
<HelpTOCNode Url="mshelp://windows/?id=10d042cc-430f-4e9f-bc09-b3361ff1ad1a" Title="Checklist: Manage Group Memberships" />
<HelpTOCNode Url="mshelp://windows/?id=d3060406-b3d4-44a0-a63f-180164f4f387" Title="Checklist: Back Up or Restore an AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=45ba077e-e529-4740-894e-26d8322a57a4" Title="Checklist: Synchronize Data from AD DS to AD LDS" />
<HelpTOCNode Url="mshelp://windows/?id=46d1d997-1dff-451f-8c02-d82ade1ae81c" Title="Working with Instances">
<HelpTOCNode Url="mshelp://windows/?id=15df831c-0026-44e6-9838-eca31fc0cd12" Title="Understanding AD LDS Instances" />
<HelpTOCNode Url="mshelp://windows/?id=58cf1c37-5f84-4459-8830-53d73c236924" Title="Understanding the AD LDS Schema" />
<HelpTOCNode Url="mshelp://windows/?id=0e83fa42-96c9-4558-827d-493c5c8301a7" Title="Understanding AD LDS Replication and Configuration Sets" />
<HelpTOCNode Url="mshelp://windows/?id=7606d9a9-cbe9-4125-80cf-d4b9f9d7ccb3" Title="Understanding AD LDS Instance Backup and Restore" />
<HelpTOCNode Url="mshelp://windows/?id=13afca07-9bcb-47fa-b686-22bbfdcfa7fb" Title="Create a New AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=8a4ced66-9ef7-49d5-99fb-93a8d69ae50f" Title="Create a Replica AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=6caaf52f-4400-44e3-91e9-2d40b224b139" Title="Install an AD LDS Replica from Media" />
<HelpTOCNode Url="mshelp://windows/?id=e153d38c-6dfb-4ae4-8b39-d22fd4f79e79" Title="Start, Stop, or Restart an AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=9c257be0-d40b-4c59-8c67-6215f38c7edb" Title="Use ADSI Edit to Manage an AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=e4ab883e-436e-4a98-8456-af15e66550d1" Title="Use Ldp.exe to Manage an AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=1d2ea13e-3698-459a-af3b-be41255715aa" Title="Import Data into an AD LDS Instance" />
<HelpTOCNode Url="mshelp://windows/?id=ed463518-ce97-4eb5-89b9-ec4d958edb53" Title="Back Up AD LDS Instance Data" />
<HelpTOCNode Url="mshelp://windows/?id=cf574719-68d1-4aea-87de-e568fdd0b6a6" Title="Restore AD LDS Instance Data" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=4fd8db90-43e2-4b3b-85f8-af92aab5249c" Title="Working with Directory Partitions">
<HelpTOCNode Url="mshelp://windows/?id=2566f6bd-172e-451d-b4c2-61a8dd30fd3e" Title="Understanding Directory Partitions" />
<HelpTOCNode Url="mshelp://windows/?id=ab5c668e-f30d-4e72-a0be-56066522d9e5" Title="Administering Directory Partitions" />
<HelpTOCNode Url="mshelp://windows/?id=f43b2a3a-18ec-4f24-84d6-90df5a93c750" Title="Create an Application Directory Partition" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=d4ee7dd8-1806-4876-9855-9174c4354dd8" Title="Working with Authentication and Access Control">
<HelpTOCNode Url="mshelp://windows/?id=c357a345-0375-4e7c-9a78-12a1db4f61d5" Title="Understanding AD LDS Users and Groups" />
<HelpTOCNode Url="mshelp://windows/?id=8a4c65da-20da-45a1-b3ed-de6f5a9c4412" Title="Import the User Classes That Are Supplied with AD LDS" />
<HelpTOCNode Url="mshelp://windows/?id=042987f0-b2ba-4d5a-aa65-0e0b1a92362d" Title="Synchronize with Active Directory Domain Services" />
<HelpTOCNode Url="mshelp://windows/?id=e9cdac4a-5132-4b43-a7c4-5cbcd4bf46a6" Title="Add an AD LDS User to the Directory" />
<HelpTOCNode Url="mshelp://windows/?id=c77f5e81-212e-47ab-b4ea-f5ac82f2b026" Title="Add an AD LDS Group to the Directory" />
<HelpTOCNode Url="mshelp://windows/?id=9bbcb7e7-8db2-405f-a9d8-93022e535747" Title="Add or Remove Members to or from an AD LDS Group" />
<HelpTOCNode Url="mshelp://windows/?id=1eb8c26e-2bdf-49cf-94b4-4284c6770892" Title="View or Set Permissions on a Directory Object" />
<HelpTOCNode Url="mshelp://windows/?id=3d1bcd6a-3e51-4be2-a911-a3e83d1b2496" Title="Disable or Enable an AD LDS User" />
<HelpTOCNode Url="mshelp://windows/?id=999967cd-9f18-44c5-8d80-347343cac9d1" Title="Set or Modify the Password of an AD LDS User" />
<HelpTOCNode Url="mshelp://windows/?id=fd35c067-aeb1-45d3-b3be-8185a6b754c6" Title="Add an Organizational Unit to the Directory" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=4121bfc9-6c68-4657-8d8d-90cb4c664c4c" Title="AD LDS Administration Tools">
<HelpTOCNode Url="mshelp://windows/?id=40da08a3-0861-4666-bdae-1f49ff143414" Title="Adamsync" />
<HelpTOCNode Url="mshelp://windows/?id=95fd3ac1-6fa7-4640-bca9-8651fb968e29" Title="ADSI Edit" />
<HelpTOCNode Url="mshelp://windows/?id=7c663266-87be-4e4a-bbeb-889da5eafbd4" Title="Csvde" />
<HelpTOCNode Url="mshelp://windows/?id=8cccc00d-b452-4109-a1a5-60e1af3af95e" Title="Ldifde" />
<HelpTOCNode Url="mshelp://windows/?id=a2976306-c63a-4131-8ce0-a3d295b5872c" Title="Ldp" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=2c20af4a-76c5-4b86-bdc9-a12ca9492085" Title="User Interface: Active Directory Lightweight Directory Services Setup Wizard">
<HelpTOCNode Url="mshelp://windows/?id=4aed37e2-52c6-4b35-9db3-6bf8a4ba6051" Title="Setup Options" />
<HelpTOCNode Url="mshelp://windows/?id=a3c3bdbe-1f7c-4d3e-a504-f66fbd90c9be" Title="Instance Name" />
<HelpTOCNode Url="mshelp://windows/?id=79f98741-9126-4cbc-be61-c26a4cb66ef3" Title="Ports" />
<HelpTOCNode Url="mshelp://windows/?id=fb629986-509c-4dcd-9e90-a04ab038b94d" Title="Application Directory Partition" />
<HelpTOCNode Url="mshelp://windows/?id=180087b1-342c-4ec4-9d3d-b806f2ab7290" Title="File Locations" />
<HelpTOCNode Url="mshelp://windows/?id=e3d6fde7-470e-49dd-8477-37190bed38df" Title="Service Account Selection" />
<HelpTOCNode Url="mshelp://windows/?id=26f03d1e-5a57-4cc9-a39e-2c082cd9597d" Title="AD LDS Administrators" />
<HelpTOCNode Url="mshelp://windows/?id=5f662b35-c775-4b92-bc46-fd1ce4f33206" Title="Import LDIF Files" />
<HelpTOCNode Url="mshelp://windows/?id=b8d18c3b-8b8d-4cf5-851f-76fabfaae4dd" Title="Ready to Install" />
<HelpTOCNode Url="mshelp://windows/?id=b8f537a7-443f-40c7-b176-bddb5c73d436" Title="Joining a Configuration Set" />
<HelpTOCNode Url="mshelp://windows/?id=af887b8c-6594-476d-ae39-992580552c15" Title="Administrative Credentials for the Configuration Set" />
<HelpTOCNode Url="mshelp://windows/?id=a80a7df3-9afa-4600-be7e-f51503c8b7be" Title="Copy Application Directory Partitions" />
<HelpTOCNode Url="mshelp://windows/?id=517e9e1c-7060-4ad5-a542-f2915d15ebb1" Title="Copying Application Information" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
</HelpTOC><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="AssetId" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="BestBet" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="LinkTerm" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="SubjectTerm" /> uU P! 7 V O{ٺan F,#XR47
]!J%TSKBuo} f yvӹhBh Qhǘ+B H˄*EBHc!B hjҠɖ 4
"@ tD ׀yη^D^Kk&u_ <Lj;& OΊmJm[5To!͗fʶ=d͟f~*[?g.oŽ{íoj
#lٽ4O9v[kgyf.?^kmvì6~>i^p5/
%ݸ֯F\
/JMyiؼyhS<;Mv5 +{gnp쿼X/?p~8[~N!esֈks%N6~]5.
|~ ;w //-q/kyϳ1Nj~kK[^3?
pu/`G9qMN9f?w[/8~^l9|ikk3b˜?4/6<c49n~Kp'Ƌrg˛Ni6Mt˟47:zmmMݴMlP ].kn妍sotwzOr>[_w[1xrUZ썿]ipӣ
n>{28[s_ U 4kvfwe7벭:'߯u_?/ėWo]c⁗jx٪ /WeF7-ԧ^
qMFx{ /\:T+2Qw]]GҢefx<v.?8?0?[& e{
2]l[zcb _wk.9~x'>79{7؟sl ?}1}ǽq>=}as<ic;=;bqz}c
lc,~z_ݗ>㑪Gһ^mr;蓜zsz{ͿˏI
_
x;w]Q3]ܹCסYZ6s^uYCp;yOt# ;}>zW6k^0wмa㺳?I3ҍ
;}FSYܮCC
93 sӫ~=KkzӖأt/poݶyXs.ڊ\\\q]]q ]]q̶GWtWItKWtWMf}jNݏoYz=/.mݴ{R_:_tþG}i^|ٗh/
ѳi_u MF\ }u~\)mҩ>K}^h/Ѻҭ> F:F:d6n72֍ rǼ_zGl^ !,vc] #,v&yCLYd= !< r䜟={ ,q J ~!X<㵹l 2Yv{s=! p?伉 v{C9sd?x L|Cqvdv;{}ww!߆֦_7}R߀7<x@Wmn<g> <(_ǧI?x;Ñ ZO'0Y<~»Ù
H|yC @=z0CP V=;OݙW rAB0fC 5Zz00ξs
{NnOu>~ŘOnPӿ=< ZwE}[7:)MSl"SߤtJ髗N)}/:m֧J_tN})/>Sߨ}JuRO龰N)}W}g)җRSo:ۧJ_kuO龷鋹O}u)/:Z黷N)}rSJuN})ҷS߰vJ+N)}SJkvO龿 N)}߶~J
h+N})];lҷS߷~J pKN});~J5tnSSJ߫wN})JwN});7
SxJK O)}7 O)}/<Mw2SJxO} )/<wRSyJk/O)}/<)}<ݜzSJ zO}C) =ҷSzJSO)}=]-.V}6+
++
++
++
++
++
++
++
++
++
++
++
++
++
+Z?!-Z<-U0`x`0ZZ00[-j. p``\0 . Cp`T\0..
0kp``0|B\. # É!q`h. / a0q``ܸ\0r;. a ÏC!0l(r`G. $ á }_0 I( aقa0r`-W. , á`x|\0-. c Cp}0LU_ 4 ahs`0\. s : !s`0]. B á!ZH @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @_~Q{glD ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, ,, , ](!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D"!B"DB!D "#{'kou}ȯۓ'h3D~{چSԦ]O5pSNQoV ,k;% KSoW)tﱳ)t73 ~ƞl|Դ -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B -B-B ߺH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H AH$ A $H /Ap)a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL& a0&L 0aL &^Wp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\\pp\k un3{5m:&s|f CUPATATPPATATPPATATPPAT
UPATATPPATATPPATATPPAT
* nj
**
*>7PT:K5ATPPATATP ~@U5Avj
**
**
**
*sw ;w
m߇~ < x a
8<x! *'"<PyЙ9h<y B=z@ӃSP笇
-^m ;PAu EQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQ9T3B=|cb7((EQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQET=;;;;;;;;;;;;;;;;;;;;;;;;>.ey((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((*+gvSsunM sSnx
*)Ec? lllzٞٙ5EEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQ$EEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQEEQQY((((((((((((((((((((((((((((((((((d((((((((((((((((((((((((((((((((-wEEQU7_-o|mc?'d+~v[5sN~wއS|n$re_n l>;t~_[\;W^cﱟ'WͿ} gwثK5wGy'tD@TPH ͟W oM%*&V wݹ
7Nmkh 6jXwW}_ffʪ ;go~~=0ptՙGgkaatHĐa-m(Qier WXj( 6n$E uVUb
mz"v&P4MŞLݛЫfPA >$=_0Ds@ .ƴ7 #]8?nX/ W 5wG]tX^ `0pJYX$CcMD Sv? &s ĽACKAs܀ 0-oO4TR]A wv J: YgpvY@n8[uj=.{(a{ a)$nU
$cz % }ЇS?'0>Oܩ;rQ?J(5$8/i _^I '5I8>ɾ Ѿ , b: &2^Okiu7.n6U{믈x:dڑ()`zQTĈ o*QLM#M% %:V,Z3^V?=oenq/ܙf`/HDFeSݒMj:LJB.Yڇ)HNC'?z92 OT@Յz\%`$#tq>~#@H!XvT(%aa Q k vb- 0܌]ꏟ}@#a92D
~~JǦ>qm±!8?ت Gw?b. z2kiw'ٔ bDR9.= 3yB;/ K N/uxekpZsT~ 9m}яb&;Vש @Pf ? /%co֠}?d!s_dUxln>U2J#AcVtPld~R>^ޢ\t.8
}P;[ѕlt6#IBGzm* )[yA<bS? |zLAyZL!FS9
`4Ow1g,ճ-H%_kCYϦ7W B_6\"];xm_Kfֽʪ|!2#ӂ Рy)u<ӆ Ĝc#u+Y&> E` 'R W1hH7̩řBV هt`nWjF1@̗#A
)3E51(MAP& j-SP zB=
{.hU UZ@=&?H_̀ёtA,ߒg :ZegWr?h{x"rizezF֟UbRTqF!8\f %t**8L eVl,- &SQGRfvk
rb9V1mk$p;GB+EhfkľS7KЗjYmG ^ *\ʽbPj
f5-v5!flJ&u*TcaSۉW)AT{zP`6S$mӤZYmk
<,QgWa% rnsߴV6bUlfSPd >'F)
N~${\q >b=7 6!g?LgZ % QE)Rx7OgL<NjؼA+¶~(_}_8ڌ r䮋}wJ9EńnoENɏT^ ܜ~ s⮫79 cSo±duj"
j3ϣEz` ^/*eoE'ݍt#Fupd'Α|ˀc X+&5[WT$p9GZ*a̐cC]I ].P2d8 <1[zѱ!hFLjV\Pp2d-䧚KYa=#|.] dF=.LZ{6^rOqTg])̱/ O
xh$ Q>2X<ydx|
e' EHlgf2բg@fw ̴XugC:{c xE/#?i4F-׳Sr[yĮh =
[pX(>2v;an{ {){Q:6yn߉HV]C
r/glEx vE{ʻ hz7?$ O N"] x8Œ bV6 ]Y>2[oF6ŭΙjY`~Xԛm֨H,xve(ٍKtIhI\U-#^y<hTsbOGgŋ.zi d)Y`lSP@wi eu/{1݁C[jt$W*Ӥ
Dl%IEXvZpEes"ܰ,
Hcd*[˓:b˓?3S6wAC9;(q-}imL w lx m0-wn<Idi/-q:K[ y7r*O)1",=fŽӞUptbl,w;
>3p"Q}R/^*ʟx7,$1 :OD%t r*1 ,(/tַuUn ie$l&{|p11 VO!燷/t5BUZL8H<:)YA3u6+M4 <u>,vg4Df/ڽ U'yqsnbWKnAl]% sZ`kO cןr)'IVɢdxi]α}v{ ^"ρǗ b?ޕhAR%,F#dԶ]=Oᚭ_z;td c~* '-T}T-!}a<=9x-m;(4?Hp嵺n{vry"2go{~wRE`u
U{a|xhv}^n
Sbt4dWڙD_c#
*^ _:Q7@-**;/M04e{w8Υ
; 8q`!jpX2`ʎ ەK;!9#d7܆os]]/ts9 Zbn
u9"v} YדEIPv+ |!ԛJuUzHYFu
B1/iӶ U강i80 퇢rQ2)k<pWð=Y;I
' ؍c^
0[J9#vu9J_i=(2 5rm Bi`(eHfwۭzxcZk UŤ zKLA֨Xl)r.4Wеv˙J2NNM''-_@̑5pZM`r0Ri3ZoGc !$A(ݡe m64 O4D줉_UgdjAV(@/O8~u@0-II@T}ij|]?e+w>ݪWׂv}|KcXo%Ŭgo|N *,+==[AxQpƜ\V]b,څnF{L"ׯJ٩کge%Jf,8];96ϨH17VS J
&ŻX3 ȳǖSK*:"7R/|= M A$4F~}\b^M U 㛀_C(B`S2BY ź.> d^hjcYJ`nbGoFd|.m
whΠwz
VpiOtzw(j17?yw;%uz'_[ Y64TN75&Q{}Rbc&j+qO*xCcj"NQa-eOMO`TXR4Deq_=Qӱv ,@c od紁 gjCYC5*VC >'\l bxX{s~n.Pۯ \\̬i`FZAxRZ+f%
5An
G>r?^ 灧"HVԄ`-Y2s^ #{?d;̒V!:3{_x΅!_o,I*t(>B
Zx R?6;;\'NP MEA6>=:vtzevP3bGo)a+ hqykBD]k]a_cOqQ#`slwik!UUYЖ3T=<IʻAy7 )߸s>Ԣ7=둳Ql_آoYVW
xǶe
k*2w*ZJ$eYBHmoYUômkg%$*Sjgb>Jqw;_&IGX>^6; X@*{^~| @H |D!
W2" T_ ťŕH
D~I0cģ}p( Krv%I̒QJd<EbvӯUɳ1 B
B>퍞|j{QnnTXLowrƢE^
ð^͝,R#o/LE Rtz27s\_<Ji
ߙX\AIY vQt`x>#,J<Fa{p 7~ٟzkt~UG˵)9B*5w 9.xWvEn2sHqGq[6JKu |@J }s'-.>NbQTz>v_ K87<$f Fͤ ~{ fD }/|z=>3I78j4v*g=DhYSN2^XmpZ>'
Ih/y b<*6p1v%Tr o. hHg22,JdKHeE0 .dDC"HR)1 @Xp10Sd#d`xzu v qspe )}#y= ~tp 3[þIWt8w4W#Ӭ&-}!y?k!T
'9v?X G=t{ G={tݣ G=t{ G=mtj ;nj (!Hp$BSͥIGO?Z8O' l3WL59҉jٯ-2mĿaee˷R^s0≳ 4 DD^1NJ)N? |%W&D؞ _RRXiܥR)LdʗMيL8a@S1dQh윦#ybITo%" zK EB Xc?grR7Gw3)' wX
F^- '"ۼ"%+F5HE]q~-yİ~E宅'+^:="6;`DEH`0"EBݦo 5+I.yȌ5Τ[[{Zٮ"v_P\׀ $> Dnd] -1VKZ"Υ+@h&a %zjH _eL . u oO^0l{ӣe*3 MJ*uTNwG(Y~l N"GEW27Z/{qv5{U|@23*b4 xwS5D%O%%X:+t,>dK5jire2;nڔi-r,'H҇Q}F\ƏU]\ ,^cݑl߶,#Fo3%M ñ _VO# cZ<@[sMS+ 2(< v$5w5T} \f^3t_M#cv6qRSXvYB{q~JQS>NZ-_d-9厃v;xDe#VB]J[P+tdw
}b 4b5 q @`tbX56uc>} deG[`VCNDF%PY]䧹M0Ә`[{Rxpsm|7pɑ)h} 20`)HJM麃C+ջ/?~vD]mQpJ(ؐb꧅c fO%jk/LYyr죦4֪3Qb˸8QU}Yc gzm0^Bt:`6y{q4h` T` h4ZDSê4s}Z#zPÁ3ώʅ1%S֭4} ><}bEҚϿvbH>5(ijԓj8s*o?05 \sñ7
-һ+u[+ {0\x>n y [Nb>,na*=!z ri/t>3 4J?ȃũ,jV[bGPGBq
byiջY,d)pTbU~r Cef*n< 9R,20 z52I Ǔ!\Zyг`nu"I#pYwQ71Z% %YpXi x+upZiӲ ! UL:'[3Ae{ost:\|ZeR%+N2$%7&,Un (;U!AJ!|y#t}h_
y[Gq ,P g'j]b# }E{ з(&AyUK
c>@]6\H[ O-#
U/ fAA(>Nx~ v ٛ Us3 3+"XK0eǨ=eO]c#c
`}C -)yOr6-c7jJXY O?KoxM(B #et H on<?
0 rp6vG:f93_3np"9zaͺ8d\9v4ZoH(n;7=,1ǩ%l4lμ];Hm,D'IGl
Z -cuGԶn-¯;-q5cֱc {؈:ܢ$r 'qo a8uE"n1 0 !ۂ9]9&r
պPAi)XH#EW9uAv'G`=bP\ 8RMFѮ_ tHľ7ȷɤݫV8h c+$%4 >^O6p1zϨQ|/Q?U2A| β`ݸY:w^<^Ǡh eD_ݴpfA~)||' 4ң9m5olEPwּP EA_X~&TGJ2IQ> $giIB|vQ]㒩
<K9 kD!C0V#l'-&@fzeCTL,)6$S){gy4)LK jph*=*u3XkW{Z {^ y
h"><fG{$) =aBjjŐTؑ3m fm~m6Z5
.4,/t7vj cyed[-3xŀ)%Rp1{ Jz /3b+Sihgrq {h'<*}r],Tq4RJd߰m&T^8;t`lsd<p@
w1U3 i Ԃ[Ý=~"άv3Q<b%-^Un)LqO{
0|0.]{/tD]ZxK\3Hn87@Q we*Ӆ"ժimC9/l
0NZj AĺI(Mƥ7, [ jȒJZ{jļ@#+F$3yڼ롵8F &ҟZ0 #ũ} ւqӴe
g36Lʵne2Q.-
ll<e4
a Ur*ݖu՟>vct=5 0Ps! \km?k02ayw^mN g!Y:&ͮ`!sʜ[-ΜݴjoΈv I4 +ӽ[Ԋ \ףGKI̮3$G]m1U/u?و}ߡ }0Z
`X~D-FjUy= &K%Vv/B6n?͔:,8 rڷ^#$ nSU
՛L82*t$[*";j>B*[dE/ )whz!CkxX8 B074 DϬhR3j5EslV7S?9.r~87[s|
kU _;4CU#+jk³gJ6
ފuX0LN&I.`0dÁ _Rː d
g# 5^7+?\+ > 2LƏ OFO~? ,Kl 18I5GLg緡H?'ClE8kxgKn^m#}w8CR1 ݂6x*ee>RR&w' 2Nd'5lhY
X} 3!VJg|] I<e0|0+aɍK/OP]z*hL_ ^Ϟ
PiRJ לZ~vh#n? |b{4eVQcg⁆xY|? )A\7R^Hmh{D;Рy'F# ,)_FapHQDgł Ӝ, 7oЫ̇b
$U
1h3JQ,e5$&~8 Mh>OA5 %ϣ%@x/ng~ħs7#r01}=mHeleeVc,sY"KmP_ќDoh
]'Ygiܾ
\)cK6b65 S^,@X% </E #q}rG7Y!ruC<
y|ϧ e J;za]X3oͭ1N2_^~3PQJ+ A?Ca-# D6w)b A7W]궯wNi kR)T/Pn;kXuEc WXߎIU꽻!9f 8+6yvN.w0S}(\QOuOGL,4R7Zj?*<+$o|ֿpdK3E=G
oJT4n3&g]jY'fƉ4
B` S7taMtڌesMfj4:^UjRP vO$b%p'/R}217x2 7|
Y=et5)20WA$L:\O\ha4q`@K+["ʭ&KDcYvƴ{YM/FSnt NZ| :Q 6@Y_xQ} 3 Af=\ ?gQetǿ +ueYyYuKJ}٩.A'7Ŋl)E)`Kn POԼde1$ǨC5 $dӝ2YN+qnV1>uN68YCj_nB-jA&d맅%'K62ݣ`ʢ'Qҩ[ZYe%{^I ƫA҂O7.AϙFIQ<%cnWYC2`~c)%3"ǎ)Bg:ʼaߥAբ'}< ,W:T@F32G֘s &zvɴtY+rO
܉DDɤo$FD7A 1lS> @G=@ }Fmӹޑd3 珆<ۧok<z(ggTz {^7Dum?י=nO D܂;QU{2{7y7#~q Un ܿrgCܾu&)V}S3g,bOCaL*Ukʎ
e
{0s L^6}"-3P ҏS]&|VY+-i`1b*yt/@Sc"N@ *ZksJ MtSU`!f*8<5
QNӎ9ǘ |Ғ 83'NgM}(NKtRݎ -/ƮAyYMjҕV2 IË+]@Y)r7r-FCGrLE2R3vBAh&pr /d6XU*h]2a$Z$CUg"Tm?%~ DM:"mt+5#>6 w <L[5"{t HM,Ŏ*4!A#=_z0ӫ:\6}Qo{;+@3AV{ 8DTq9F66.,%8*gF3 7+
Aclq WbZ= ɊUr.^v ꣃOeoU%kb:vu>FTT.a@X4ܡt0o1\U|/OՔ欰f"E7*߅XRn g/'7켎8Zr? /Je)BcwY=Ѝ7m5$CZfʁF3Za]?>q >nZ,oi!ŋ;gP爧N| HtB]=GLj* u[u %a*[+rAhPh&PpU7x9ae_xӏm]9MȷJ]5R [`sVHV$j[#=a2ɳ~}J\ywOxyXI3Y+W^D6 ]F?$A xS^e/)Ri?7 G:u 42r
`Z$ZT鲒$ zk+eCF:!NL\NFVvmiUEFMKgΉ7 = ~XDHb7~&$nmÝ3e(r'Xz8Ҥ;xɷSaYZf. (&V}l8R;ӈpD^oV Bi1*HX <VLyDZnY G#Fr}.^QUGc^&-2RJ0R,-pivy0>(6>?'%ތJP;Ϛ\ sSD SbWOlrH7<Z3}͏l_˳XlXy s^j4Ht=쏦{wteeB$&Ptfxv#d<*Ư0 yV06H gMr Q)`Ha 8* P?yhC2_ˁs[(UFKk_lH\>& mAMEWNvj^@SnĄoi+[5s4$0 |կB~/ÑtޣŇ
1s3PrB㫅J@fY$I8TLUbG:bV/y{j g_:xi2vG :ՎM#';lf6@%1>BJE|wl'<
[m1Շ:gKS8X 3ƻ
$wm ՃX C'n
z~JV2v~o[iX4BMé)bF%\NUQoH D Cw*ӉZ/y{)D3. ~8M p *^E;|<iHzԦS bk2,1`JDevIn;31a Xӛ@,(URS֭42ˆUQvҫپ$fE2TdIԆ>%FǶ*kؑV!|(Lth[âS0Ww84,,q rEJ"&N d)9 :NS%r/R`D59.WWt*Ɏx"S" ƕK*݂\MA(Аm)1beIeH_,k-xLr
a ((
~Ck, ^j4O'B.Ft]__|5. MδvgyU_ ņΩ5 >I]3zW^eRg} ?BI\34In}i+{¹2u&fIש9UO_2 l^\p;pugy], D@8 -z
=d 1?w[NE(Bo߸w ;8*#V jQϒ:2Qt3M`,jN^bڈ .vwh*q(镖 e I; K"`R8r7(տ. 7)n']TjYl~| ؆n$_`6hJ-PMUsHC;Zr Ⱥ%X{`*ØvU
*g^&i @~ n{o/: ovH+#HqB,!do+Z&pWz;b̻HCX\A&%5 ̜Ńe1߫N3̮h)t6F ސG! f]9[y)ҴgS*#ud zePsQ]m
5xsCOE9p+=U1&}}xÍo9!~GFW8&C
E|եl+ND|-BsZMud. o~\J9HNbƍ}t% q\w˓paF5[;v|>/5]Gu(yeMUXvf- 6ֱa[[^y <[G DYI2#V(FC
4wx@6gPxո/+֭V~]ؙSxDO}x ɑ- =!,1gAHyTVY?f? -Pa^Δ_m-jJ+D\#(k^ۻ8 W}"Ōxkotoغ6x3D!^6$x ^ fܧ/ E I" |YDG_qlv=h a 2EmQWz ݆&pÜyW-] 䤬(f3Az
ؕ{RR#dI~1IҢs= !eږk=0s#e|c(cw.g%3ID{@nDmi"ԙ T')
lRW{)3ee< ~ v'CyÝ6!{>p{F z{ Pt <ݧ<\`\fkRyوmÌʂ^Hnp c̙7:Nc]&<"87 b6W; rUaI`R(hO(*Zl;L7Z}Y\H?{ yy{Y6{B{?g~{Ȥ ;rp,5_ScN]4bо1|ˆtz+ }" 9ĸ"5^;t4$ji%AwNC$y5U"*__I }X*>?#D^fפ }8x߷ZY97N_ы<I(T
֟$Gh*z)RkJԀ/I~Q{xS4$ >;hl8qg qt Y?С64ث̨AMMIs"p6^1W)4Z[ *:% qkԶs >Pn<dI!H,q7}MYrΜ< Nkɍ* W`UN$ozrur^x`%EW<I]9PӽI)^(yߥUsSb$$t9fW37 ի{VHx
] N/JeX#6ڋXZ u_B"7 Rb3l?Ք~w}R L; 2bV.RԨS @=zȧi3: Bn^L57Qէ}c]څoq7< j (w < e frIJM_IM@}Q: LCKچn8 =7=If;vm $BHfcb)CLj7kfRa6lIOPXQ9-U;?Rg #!:~
ޡ?UP~OrCI=
ЍBS;?fLd]ef1$00ɗ _HKnu弢T!MQ|P>94K$#["| SϏ o`#Z@qݗ+ l2;G+^̉S\Yb}hVx\Bb=iV5k++3&+/npZSzEjQ=a oXM:7(* -y^y'Ƙijx=5Lbvg1G&]ȗ T92"P? 766SŸlŢ #2tAz=er.kF&\nd C\HËcd. ݇x|FEx4[ CаG TǻFIӇz0܉ )s.=pY}rIiJ GJ>BOV 35ŋ U]M)e *:BC\ hYM+ m% M qey]V3~61lheFh{Q]PGN9f Yrx 0t
Z;x~|1B 'R<#{ SGQ L#]=њh݂l B 5ڊYGn]̲~7 SVJ @H_TH?!Ҳjժv]Juyo]fQcy~"'auW]$Aڑ] ESxKk ZCfau*į>}Y }?(DEE\G吟KpXzx,NK4Î#v>>s=%HP~>h"'1`С' Hǧd-3<;0,~5<IIڑ1h@mvKT qEAOS;G>'[`cHE9^F~xx>b
Eofm,%}]n0(l:QrS( X4QR7z3C: RL9uVϰ# ցtޏ=&wTd#VuʟZ`Jlb%J;8lO~\`^D?yQ㿸me5CZ=ReI
%BV&A[䥹( G|ii٦ԚMJy8 sb!ph*F¯mi
|9
^yzhyzR>W%[{ah "M9$
13( Ty=9zsڱ#op`#@!,Q *]?LHп{b {S&? Q"#ӄ|} /e랈? R=ʂt ݸ6>Yv,w qo=n_٭_vDBQwȦW?'s9! nάg?!6k#oG\ƠyH<u 7 ;^w?'݂FO yf<x .7D%4K^Λ_E!IC$A ]@!.6Y
U= ,TçD
*RԒ#4JO:5;=ѕ,"-~1\VQNR_{{tDԆU <K>'T T^wdϞ\Uۯ.@s &]fr1+ i4?>) a輜#TZi 6C˧OF2O u$ԬZ Ըn˄k+Jp9<L*oΫ-/S`nz| țk.AK@xM
Q͕n(x^z{:T}L4hըأt ?MklFBhߌ^` H(rJS4
Ujtk_st`Fq)UM ) yff>@( ɷ-҉P3^Aw_L41$8<5 <''Kv؝iic𫶮bwt1&X`bg?NI'Yl:TÝ_[V8@H 8աXO!kg^v&Vg' C%΅S1 %Rt^/mB/) 'HW| _
)o4RgU0NlU(kNb#RѲwĝE\rX8 UE#Y[V O zumǭ{k358ح8Cl濤jߘ~,.X1( <#Ow^
U"m( M2nHSH
ng qU"g
[k||WPl&)> mHj槱 j_]uWFxE zfa!.H(KUݓ?,lj^$fzGCK
BXhQ<z[]wJY!nǛKq?
~x`L{JhH` v[W IGw@n
c? fV{Y^vcSn*Kx~ 2ZnKW <7l^Kb6_{c`^2oоgavk-\Swyj-D G<O_GΗIjgok~A*oɻd32yDؔQk *r{A'Fp57` 64 n u,Q!OHcck`.s:|-bY+{i: hn<p:H?i ·柬r,4~N K^R d1 u6DCv NSv`k7KYezICOҤ`(uȾ3 Lag٩Y[zEE7CQޒ pVȉA=M63nt7:x/6VH(QV@JH/4SdpFazҤ_3!:icEd"p1βQ`[CNrˢ
kҍx!#Z̴g
hDaR)م4QGWf1l7v#vF ae%5 blNQa eu;yC{"pV>`W*2gZKSsok%vV2&õzbj9gVA;>I{bo_ͨϾ` 1G͔
'~ؓqP/wۃ~ }]#v}q uHtwq"nQENv;n#o-\"{a(u s6rHԗӏs8tԖP1N=jI?wwi z@ y~pzN#,a^VJOkS9|9
S] +FU'Ѥʚ& zOFu3;Ry97θ AxOؿ263D:o~yEsT] &bwdg~ -vF$MM\e.R"/>/0W`cH0;4g
;pts-=0m> ѥ{[ 6ͳ8pj4}1d2
-y 31ͪB
X^S[j *~Bܮ|:
h&p@iUbɉ`&&) zرqM>G(ppHIᇢY`nj S4#., 5Tjo'$ ~Rj !;?8I `ֱzA{.6QnQecAfXg1K3wAb;k=X/0@U2u|e)ڝjb2y nbp 꺯i(BG"GdJ^0-q(m@ }"tSN+ <1+r6dzAʐ;V;@R jŢbjX5iKG?V7C -iDGĘ0E)rKyMZW&Iӥ=̞ b-5&ޔuaѝ{[PSH ,dy~ZN zVkk Ǐ?.O{d HX E Q ;v-FwKY,j/k6n=J."Z;lKaq\8̓F/6j ?"*4ZEŶVYQO 'TIbIYD4`HGIF K Z
Hֱ"b&G`}>:сSGfnyc{;vI< 6ƒ,Spua܊ zdCL7KwhBһ6[v1:O_8w^$)5K[)C2gĜ3c-Vni'EDX*1(V^{BOs]`NZϣӁ8Vv1$
NeRQ+M/Vz*Z]9ly3Tw;;mM@w>q/t8T={OOe "5 .; 6j+jlժ:44@1QA@EO_ܞ~ɬZFqG.#X^R>_"ؿXj$>~ͷBK2[#
21s Z]W
.gv<\kչ lP0,\ BUcRج^C+㦭mf̪68f; ӐZ" PVlT3z=S>AўSƟN= яDHunlӃ:aC%h'y+#u3tۍ8fQdR+T]fBY_h:rc| :
ˀN
M[jG:;D_lXρA@ |fÓt\XȪ(꽆rp e`3g[tO/ K]$]u@q 8n Q6b^\
rv9eL>2%}iM3WBE{5x*Xe^ڣOLȘp6 Ͷ%]48Rz9{UHԓwY'L| {Oح H>,|X`OP hN "GOES@cB/H90ذ{I
T1vù'2N
ҼR-1@j 6^柾 ? ;N #N9xil
_['je6KhKĶ +[cԳ>yyP)\B1&^nVWnm@$Ny7^[9Ilh<S:.P<5Nd8ifd` ]taDBn<ytܿO"l 7ġizF!b{孧f; ĭD;P:5@O)j#@0 zpg~k{S2AIi]0ԓ h :W%.:Lhae`6;"LwF ^Фb >BɉEH#nRLy]rVcꯖ,w!+Ly-_>/kՉeTQ#
v
$ % f.{{llH? ޑ `H?\84iJ5tB7,4my'[XuD1CT z5[%*8ODbI%H $C~\i l-7eTş
|fjnϞK.R}
y~B& [7G^fL_>毓NGۓ`רݦ|XMyᾪ5)H3 ?M
1!?m6
hfHXzcsvF$ {4 l\ٳ&Ͷ\ lgA"c UAmtqG$88OvPWePuNou;PZ*(\O}u $׀H^_u8'ejUZ{z>5wzQD(n!Qpk/ʰ4tD?, )'asG֍t$4{\4=x6~EHQRp#,¼jRf ژE$udꦦj (v
Lxpn bwIϞcبI":S n]EL UprEUhހMāw36 3 0ħZ̟6dG!bֻSvrzU)BMBiR
D'XgТ[ζ 9IuNiDoEkKFJf۟K-qyIMK^? 3> wb;Jb8(pY٩#t:WϷW
i7>c~Q
۶ 5\t( ^*Ӛ-a0ӲvF ¸!u3.ۻ>}n g<h9f yZpwhMebRy+m=#a r<k& -ǛԻ#8w\. Xe쵯jHj;vs iٰish:ُo*7
ч24#599IS,%+Fb_u--pv
eQGvd}I<,< Ŝwwy~7 T\5rk5c~`e>.W 9Ԇf' ޝSjo; &%üƈW5OƷݛ
GoW^[CK Ǣo
\19yOT:J(~yzۏ=@,Yr WO$5pT 2z+Uϯe<Β7J6d aYK>I{&|}
838 mW }+~iܮbqKQy'R@y N^O.̠ ;ܨ/ mH̆c1 &(9rlnDW)wQbf6[t
[9U^f7C f<wΛt[KJkpk]p5Qy"\{U>~o&tekac<tM[{ŬiK&cB)9 ղlxv| Sa=0]q%?,u9;KYb ʹjn_+ܦ:jER %n8)E\ Kf;b K9 _ 09KWN 6!N3 oh uH~
aWh!ߣ-\[$^[B#!.ɲ_R'r="|XD! SaVoV[ M GK kp`1HjJQƘ"x0UQC B$@:@vj= D Aj#OucixjUM1u1bMrn[ _lsZ[>O
i"^R5q@Ϣ )%ч` cW5u e^^HX$H˻
$ҏ^}ZO~P?q =}Fxe ]Π/J{/I5^Ӛ#.oSbU:66Gߦfa֩Dd(YA1vc)I-B7}M-GK״+5 Sgrb`S&wVjdܬO~eh?3Ye@[#E.ک?/PF+>L~eØ
cƩ͇0'']fStWq
y`'[-~w9]sݧoF:»9uYrWܚco4JW{t˯^VQ:bts&.XO\Z- 3 S}.oPt˙TOzN,k.(D }Sz S$`_$\~na+˰} ~[^o?|F `|^*t\tf(
6h?+J?=0g'yq|fϙGӜ .\q0\
Lo)9ͨhoՋb3?KkǝfG Cqwr)0ݯwK&D篮ELȊf9Tu]OuO sT\ 0ϞTD c Ek mfhe1VrE"T
3M18CKik6BHX)O1$X')S (Wo 8=PnW̩ɴ_xC) | OVw$NT\0fEzL", 5Ryhb&9[Ms Kv
%MSvB ui|^Hs
^p\g04`%Z,4@rh-cm'Cj7}%fyZb3F>s7܂P>}0щ& f:]Ge=u)e_1UNNˬUtʼ#3 KDkc>*|n3BOh,F{|2kRLfʕ"q-Ỿ<@ݬ veIpΩJ)Ҏd?jBsmƯ|oW\H( Mykt?`P7^y/H %\y(t<~Ȃcݩ(lFWET4;"ޘKňٷs[^6 hl<jt
;$-}ѮfŎkM]OVLo@NVOQzd("m>m)a;7 v o6}~s[\O=L_Bh =܃ PLK?PDYfwAl\N\\GS/f$)^v߸#aga[L,"]A%$],5@ 5`n#x1vgw>9V
F(UbçvS7{Jz<Ocz-D.WL)hAz{qqAv`X&Y+**J))KQ&&@%H'HHLG¥}f ;@ M|sA9!ؚ>}G1\( E PGSJ1!NކFةH*=\`9ikEM 7CQW]ks Xqļ+_# C`Mj w6<!B5D)LHR* BjǶ4[c{Id@3T7pʄ %5o
HuDM`PU iKE ¨.T> tbkF3uAHZ~o`y_}1:L`s|zbA8u3J ŊFDߦ>"]vI ͢u8Ni6
شug ӍN.ބgz`-6,֪ 4|{,U˱q^rN҉f'i292V K۴n=KB}^bһ9x9 aJUB@qL,E=Rl'ua Ĵ.O8&wzuF$ |"ujMp<na{/`x;lIB409snoxI&BFkž !PSYONPb`usx Ԏ]8|`mYw8UbF /g<g!š:c#:O # qCr|tS(s3-J * FL9Q3yf>.PKQiU cM]*
, TJQ¿ S]\*zܽs@ά96|s#%iJ ]5xVE_9Sutg=~~;$C3
~ ۨ
#q e{5XZ= B;j&} ya
f<CBo 84}C"f*5#$}g9*X30?9ʓ`Jb0KMXQ6
dS&Yf]'XasUje6ݪ^#G#B0ٯ^}^&Ю_/s$*DpY:i@of'cu=͂Sϖ
{Uն\ȏxjXy*[ Y Myʰ
]zb\"%Yo\~H %Vkڽj >m<0ѵawk(gQff1{z Va~vCi͌jۍp}o3fmob@w>EH$fAr,/m 27;[glzVd>~*MP Q">97}<F% hp&BڛjFU>n̳+@|1_Gݍ"~ށ+
vAWe, K h={-fG0ŀzL8<r>qI+SPR H8{,˟ I47(!MΊtڨA5z() $gnH8ַW:cP4y>ѰU{^mZO
_VbOWWZ9 ;+G, T(a L@^
$IMULd&JzTZL&q-Pq"fy=Jaѝ"7#Mے-B+)G؋ENQ@ӷoQ}Ĉ!K^`3&G ^ u'yE*6$myi.;]i m o+Dg&JS*rK& @F,J _"Uwܞ~N&-H#.::PYqĖ g0? R>= jhw'N(?=VBO 50K\Ms3&>]ni' <fZ~ZA@% jCfԙ܊mC>lB4 gak&1RE{mZ1Lhg}r\E ӯtmM1C_e>C~u-F$Ysڢ#ȖvRF_X{Ul/͔U) /P"L3_*}[";:@N~ylfݲf)
) 0I4K VD- */k A2G,L$S>YpNR P 㛩nrV ^[x̒()?≠+[kSNn_ba ϭ[iM\ΠzaE/L3 :) )'@Ṯ"hH gLz֓O=kkZ > N`Mcgnr+$ONhWyZ {7vNr3:愮Ҙ-P kð30C \J{č|*eP \(PF!z<ĂhJlu閄{.l@v$>h7ofTpBd.$l =28!u8`3#^W($}#l9{I| o\DǢ<e fSDm)@mhT[M *ƚs C|4V
H=X D1} 70;1=[ W :9&'W~ )+XǚOPiv҆KUbEvxE/Ow?2C> Cr.vx|^kfjF 096}G"@8 b euƸ)Ρ5.8٧O$>hγoPTp9%;G `<xƼ]frP's? C]T(|ϊB6Z7%7G#w[חT?ȌcFM~;uur +M!1Ԕmfޫ&ĔҌuzgRHܹJ (ћTDXo~4=( a/2gۗd74 7 g -{"aOdnTH2 {wf{Q5^|a? KI;B KD <csm Zje%9)>/AdJfH7i| 5_ 3bZT/Yks
&jaȢoyq dA.X 9Ĩ/})U JH< #t H@2'8*
~#
dF$ѓ
03z |&_WbUa_bhm#KX G MWi/v]g /G@ʯ鲉o\?Lʤz'[5|>jĘvZ
I
6?1_I Sŧx+'Ȏ.ະ(>| Fr|J<q+5iZpk#s~6>:wS)1_qEa"kߐ}% &TK#/29K\,
F
2k N2fPJ:&b\?H #;X4J+Ӣ4Jm+ <eNs[R*
jE"au2Cq:sp* (]\@9B^w23gVʫ 綅sYz]"70ZxX1P&z1<%R1,ISqaQ>l]:oQ)+؝7 qL Gh)|*.@THo=r{ \XW\,t&+'8 g2 Ljlh?NÞ)r(Nklqx)E
Ƽ?u3+ΠV ?raF|솋FyF,oV$%O4~uq(Ml\ ' .gp =p/AZhD^۷ABA8Ǒj1U.9 jBǺ a _gI.;O/* )I &M腕8 QHLKX Ao8CO B>63U(<%%@70|F/NEU2FJDmc{O;uRO:kiuzjU0~v4OW( 6xeIhg w,Eޭdl aӿq)vO5KGIOGC"s}&GW1^WWfgfn?,R &5} FdN +ދIBg0
GjKK?fɗ77GG縷{ 'L@|twvbBC7KOJt ~dq dzE`fk;Wnu_s{a/ ]|xvXm qx)Je V1b1Ĕ^ Iڡۧt3c2'+ > c{TVoG(>դP/_7Y;e[l^ R'u>dKг5?g1M@UCnGq
ujy=`UL)6c)C㌉Iy9}صmGĨRQ'IIīE<t0B>@3Q 4A֏4gD~j6Z9|^Ȗf
_
'XyG52_@]"& $Q:ͼ}-rB>(XpyU=Ա7(6 ݕ
QvD ґjnE˽? *}], S>ާyX@F*"qDm'=q?jCqD8RR Y3J`U˲v',ٓ-J%aўbIL⋧dNx4wKǐ'WA7&
t<2#lYr״)Ի|K켵ؚ:fV]` 'z3 w-!;5iҏ;<2}lv' Fpyj: (:KWoNzWB^[5-q<ܡv1cN6\cDZT4+-W r !Ӈ]ۯ* VkUc ?HH
9+K%VD7_@' W/q0]KՃ_.z x`zJGN|\4[
0j3@FZy0\@qE߆.;Z!etQ~რc6s"vo2;9q
eMNu1Dp1T
qk"főyuՆ"̰|Œ@~%NբDX:AUtXe/RuQKV>еN52"1⧂*D PiE%y7G$dgrh_:җcd0{%Ԅ z' .;LUq{O$ ݑpR<% #8 ^ l
q$<9".0L jm|hIGyO;ФpD+rU֘%< G jp F 1ntD7_<RcH4:BDH<=Z7{8х;w0hI%Z2V1 A;uV5p =ʨ @6Nj &pы$ֺzfD
eۙs&q7sd-SCy|,2w %<@IHc3 W&!Vw,MqOxVI|e˾ju=. 옧? md 4F7Skzez*ga}Ȧ/w; j+T2AI&/.f^D]AGO3'1VO_ҙh K+ML(_&ԻJNtY?'TYN,:hBO %3K]XOTVmLl3{ld J bpS kLo
GFW eD5=(ls&Ik1|q<R=C ;7t7kD/rR(C }VzW#;qena ڂ: 0ne>+:wqhCiPxoۤ ߭<s 1|3y
XUƠ[X|\c]nUD`Y P s 7[G ?ER.ֺƂ9 1N/x$wf\H-!Y l
/SD3!JMQ2Զ?mbZJ'2 7|fiZ MBH7WU6@ 2}-3Kn]EUFqԡ[f3g"oNH]
/JmU&8vb| T?X=a>3GwUj}:Ox ՖY#,1"9@r^p5"H )ЂNr5yOm>c:+fE ~{ -QHOPpDozb @4#Mo1_Mt4>^+ ԃ^sBZt wbś0iau1sܮLII^Jґ)S)za&.(DUD0E X!m_I5Rr I:7<Z ^6k{J쟌 3e-5 }>Җ &@R*}͋'g5bFn=ʌƩsSqaufuK
aS;OR!HGlڣլ\ tTFr{\d$^fTꘈQF-6#c܂ K {:JƜN7CD
4j/opz{v+юF>|#;bM:8d9| N*XkZ P 5ۛQ?.g_3pB-n]LY fUvNoJ4Tn/s-_"w E(Fz Ñ̪%ET~P8jjD"-V (a*z1팈Q%bL*RJ`qÐ֑Qq̹P'7 +FKsU*L%<7+ =D_g3YO/;SnɭގjFA57U5K\C >[m
B61 53Z>l>˽¾H,D[pMK(yrZa>`XDm _Pr$D8${m4N"}
JE/QU\;%Ks t%fpB19<dD +:ظӞ7CSX+6P.!mZm7:2 oYo%#u/~% ?`Pg))nj
J<b_3
6 eБXoq%gjWmb2t ѮHK*+0! mH6Ge%LerhO`uT?Qk &$+}"o;őKAjj!o5 tSKඤD#Jy\VqX tL\-XÊӯV%ѯt^.3 B`;վhE!4APm25
RZsZ6nIݾRL,`)pW|$6Ԟ81x
-.٬YԧKJ *ʡ8Պ[[)] ɞ$|2Cz9m(/$ahBLk1 [Ǜdԁ|S*TSo-nz1;@k[Ju y5xqx%1+ 4B3RDn{ܾ- k6^5@)P"x,7S}bVKEUe5"Js^0*3e3â X)$<qUSK9T}( ˻ ϝ{U,G7/:Аn2o,$E
mZ/lyd} ${k>BYH,3,]A ^k>&@a<F_ %uÅ1/ڃp!I1͇ޡq''g#F7t"3.+$ኺ>S1#J۽]WmW| HSw\̀7i ew$}ApjpCwj|1.Z߂ (ĥImw<wڠ4"&v'} M,rnH KηΙC*UbklwLk엍 qLnZ}U};Cfx&Wnak?V>ijاA"w$Z0"f +D h!JSA~W7 /MhPDq D?|9{
AALb$CTuH1z!le SY )ft<z1ÑJt3+byKPoFةO+t
.O BؑC+۸hWv>҃аڪoHN8 kl+cX1Q֠; =/:#Vdᩰ8E +X?dMs7өh[NOg%Z{xkT7Q&ƺC PFg ӟw,Qnu1 0xއ9.OfW
*_!>nܾm=7`<$|H6Y}^
lmq)XDrw`V)k~k"]OM`SEri, /ע2z3j;"~3љ#_[t(ʹ͉>')լݚ3z`$hFq _}P|F8H Q $;CttPG#gLy!C{տ 5
Rw雥}o=c iTB[,f:rsKhm-q2V9[Vp]@ ,[lyprCSu%Zvzvy~kZ7Q _6?<s@kI- eE 2jZoM#@ɀ=?+K?ĘR 'y
YkhYLFĞ=p&GZߨ!w|z7#=7GzȊ骎 kP
BDJ|j?Ego& =EUA/bs! t;eᨠ(lL{=J ~ʥ>˱07Ha;& gR-LAM[x
W●g{p!( ;6[w|>6HܷPzu~?ݽ4KFb,%
inW1*F*9)(1̒!C :4P+1Sa 9h }PۆEQQ[q,L2AD}ʁ*w8 /3 rEC0~ͻF q-}Co]=hOT蒮֚
j~{zeL"9[M(wa`KmbX, +ZyCY,E(gj{N3|8!]Y:FyOͱ$Nwڒ4sDl/u|(J&nteܤ;}IǢ_"Q9,D] 0>7Ϣ]ND ϰ73q|fx
e8I
ħNcĈ0̷6#H
ȆD o[_ ?ófCD{L0ڴ7Dv6L,Y lHH9 wIK-D"#F"p%ϰ2*qK9sS]Z+@ 5: M|^j;, \[%柂B
)KȰu~ D#,Rbf |^L
-$[!5n<YEc/}j'Y2P]ms:,D ۺG~I
A3SNTvD2 *F+V 14x`tP/= j?kC. Cl2,n@;>
+
P ?n
G65KӗaO_t`!7(iȔϹA4;!d [͘<̏c\燲Ӕ@{ 8@bzUt1Aʸ?w cg QBi h J-םe (݅<^(2W DvE" %装2=C{Zֿ.H40п,nR{R-1fF0XßoI9r00͖gGtH#m*kLd%TJl!n5 <Д1RZ-(,u_סusE&0Dh4g\UJh@
!5i)Y$K,iW+{T̩M{ޖbyt*ປ@ 97MZ ` `THRxK CSJSժ%uMV/mN'W4P4#ksMK'Ng=aԜy1̼5c եzvh*@ٷ[i"݈P.:zIS
N ;F&Sk64Z<=TF]Y0Ȍ,ċ Dilxia5&Yuv Ob=W Vj<"1gFb2:+.ZP*Ed(ysoX͗/gRh)uc LDX ;jD$O>ZrM U8yil{ >`06P jX%#_K JT
F̀)_@NZP^桵M'{#-q=U5X3=4yV
;$ 'qPbffVBZ/[~*h Yr(9$"D7NWxq*,+V/8F^ @v >>BG_.o a_ hFx@k1% Q-=.M2clM 5Ռˊ;Zg9u} N_u')T w8P/oAu$, Yђ`Gp?>,Sk V9ҠH=M>rQ~*9!: 21XEv7xԀ:hkJTl5 7h]BL
Eu>Lft̗r#ld{wI{h@{1/:
* &B6фӽ S]"M
MZ&CVM14d hfzD^][es'8ˉ»5 a ʦ3iݼNQvMeYWq117"?}Svi#nR'NZ`tVˣVKDrٖ)Z&fXa 'z ˮ4X<~`d.,v0T49C]G1OT\ 瞍ӫ h{[eP[/"mEOz5ۺ!](
.^Al<^X*py3[L"b({{8ڧ+eѓؔhS6l* ə5CjOJ+Y/I`6V,)9fނy<X*h%66{)?Y;l5!da[^ξϹD;uBNH xO
v.Zn\gÆ<1 - EkCk& .^ z~WL4QE$?rRsvv -W?nt'^ CI~ҏX'X06 D~@4f[Up<OxEZX'='jƳW7SPP:t\]4إ?;vMGŁmjOQ6Jb0!9իJL#D;0( r*4;#{-l\^o8
NǓ$Qvii@; "$@Jzl(,75 m& v@D$4e?g?X6_؉5' VBea{F'ᡠ` ~~E"OluIAetCMp>D !\nNBofwpH(#,=28UuN;s>40 "0f^op? R @ 4 a1 BbtAuЇBtè`uI©P*)UX \D:@
> txm1>s
N3w ;dZ AW kCgQeIvLI{3 \ B U0)D9y ?٢Pi;(((}(q(|)B])'ڬv 9L6%F֝|= F3M]|lQ $Ը~)\v=>⍳/L_OQysR{N+U RxIWfw0בgr9^d?*iPg80>0dc
:u~kIBbK#0:= T~ s Yz8Co }PPPC7; IHa 'M/ŏnߣ} t<~}lRȨ =\d(Ev֚gfg~OS7^{lٔyeZ^/([<l|(Q/[ d`cosA bQ_OhTDT^< l1ct^NwXY'ՀU>,4$>Hu^8z잙>Ƌuw9 ߯UsVW7 d87Nņqqm Dؙ@zL&#d{+$z[ %'J@J~Nw/zm3 )(Ʉy|.&-)Z8}G4MJ =/]3E-wwV̵mR7RzM#c mے#җ& hq@ϧjxy(|n*bidQ4y%qy=%+YM[hUBgxI&_~ AVEև<]߷ W/G>_ R,s->!|o!0sJTl6JA_Qq{n8t@ >/"+П:ol,+&仰̋A
+h (|"|r!dM3y&܆^.ߋEUT: tʐ Md}U HoΏHai7t
nCxsNqY@
ʼKFa tcUjv U),C;-3 } m7wrGiW}xF Y&hƭZwZ'w(`tk|3^wQ(̥WgKlO;;;ne l
с y~/UN3MYQGwIWOݶD1I]o K
*}} G~?|pnt" -Y2H~N )76 /~ "{}_sx_Srv
u&"燗2j?I{ KKG "_ ʺ}l/USw,4+i7n^v 6w`:<ASo4 d$J
>PG̤Ǩe<wTi
[~*Փ]`u>˹7Pr.^j(ϟOl>}`1CiλE?eE'<XQ[К%[ym⵿r32hd榱wj&^Pָx O7='Pax.{GTv;>f˘ʗ;V`Uc<ҳ0^;NW3W;7XEoy{Ⱥ̒]`\fʎ
UB@~C''R_ bM`~LyEpһV:mRPM]&?XnzĉF}-3mn,U1ǐ;%u bmZO,OZPK{rn}x?VX1c;<K/P"Yy~i_~a b$ۼ W3^6wʗ튍4kzj>"7'9+go6zOĎoۅꇮ |+28ϛ/8])x. ۆW_/KVr3- ƍqҚ el.H7lZLNm/Of2mבS.-~2-cu!Ħ /d_CX傗kF5pN{6z":N``u6NѶ0|B;B{Hz\K[0}my4 n'~EY/QI
{^Mdc[53/ȩ
N7)~~N
,xiQ"sխ, xg$ u4uj5R|n^(h}9tѧ儇RklИ{.=gS=Dhmy(7vm]R&fG9/[DůEpH 2S!&n;/iTD7bYĩĤì^*[d?%DJ2|mYNH^^}fD&H F) ');77!ʩ:/2o\+ Apֵv4@1jg8l}ñ=,mDyNj{ ͋yyߍ@Sipeil-?ZðKO,^LgvJ|'9{7L^\DV ,Ϩ]ijkm9
:Z QMEea~Zv" =Ϟ2@.; RqUw?Yl,~ƿa-l2J=e [;lx<q -$a̦#$p{\p_\] -^Y E|"bEO߅,ÿzV})( pP*^&S<e)ړP_ 'XǛ PPbi<S^5>D
W=
t_f~.~) cz4n_p/ꖸ>rEmz[k ˝M 0; QBEafʂX./Ehr,NCO; ?_:L(Shhhhhhh2nZ( W)We?P{ٽٟVm_*H+m
% hy]ad+l!nX<
2x b1~¡=c2:20㍤tyUTcmpRAN WݳWO1ĮqVzy-OfW1fE9oCHb,k9Sp\kPJPƐ[xF2ZEGP\SDlWB`gփVVE촙jSNQ#ᜲ{8eӇ髐cLSgue5ep,x=vN%l V>t>G.R2;Λs K.m{咨^gE$%F,A橜u>jUsa3 .YC5lͅ)6QN,Ү>?Ύ@x9EF,EwXri6
FC"p4 @Vӡ9 .rVO<sF HUV%#(bW։!qaH`-⽔9=q-$4ˮF;KMm{d+N59({AR"bɹfjak[Sw)cXSdAK*Ǒ^̭X av#ba$-զ>q䪶J>; D %<KE "\uzLiFS6yK$镱]ܨQezp@KK5cm%`μUg3V# .d([
y" K8:GOKbwi!P@O ؤVOa]%N*+(SB-N/jc_WGDXӉן]<vZB *
#mA#M<''ek> 2aCdNa&6Qtі:lFOP<c-XEDIoZ2m06hy$3 E O2O+kEX b[GUq UtS- f`/-x.mD
Duj'$+ '\!ɣpw DOJ\b*w
N%*'H
2z Anr4gta"ÙZҮo` qTIEmHH
ܾ-ͩn`[S8"Ǹd9B[gXXXV!
u8#qz0kYna>ʏ8R嚆*$<"Te $LI0ƆjVgGeXɟ"EK/ZѢ?WL 2wHPŌ7 h8+;<
-I
fEjb@^kn9uY+!])V[,}q2t^4 rk~V}G;GͱVMe HZ 55u~=\,l\xԅ0{PrdpCsjt{5vJ]Өeft8p\rm450A.l6K -@JUӴX۪+=R?D BE4 6Q-AwQXfjli2$cy.t̀A^#wt|*M_[s[) ԥ 3УsY`a lK
q3sO=wmj-irG<^)gtuJuXI֮Pb)053 p;:13s\H3 ${0CVC3^Il1sLf 6Aeh_-TEψoiH{IJK&]Ҟ"heؗIE.|웏9/x B)7H+y^Gԓe15h=re>f)IsTq^YI:b0pqGg6虜ae+b !O Z\8vDOIV5Nt"w{I7qD%i6;i\LKo*]3tc02ck=F@D 6<u-νjZvDL=QЏ˸n2 %PHu#i5چ]TLk{Ұ[}x%TZ30BT}\n JmMVo(/_l++p-jF77faJ'XބO9LT͌{cw[POgO
0K
dzܮ55;9"!h_+W{J""ֶ(+o%a<A) [<nb (bMLzzUPWLW ~|pF{V9Jz0M5j kjaWWl k8jڇ EŶJ* 0n,8(EqUBm0 r,a2ur &9&ܤ0 MH|9L 8U͵5k,It45RYwQDBNq6}v ȧHvENJW/q!Ke)qw]oP>IrZ+ UXf!X݀
d% 'Abx X5bF=WsEhkPC◆ Vˉ4GuU;xa& KJs{e
,[ Li)W<6%홪sh)lwT_N,Y\&Q %Yޥw {4,ߩIۼD; \OfZ,rj{<N% Ca6 ɸq9PQaSwQ +_g''\
iC\XԤ9OC'El=eKyV5I,m{%@E`ĠU:j@[xFᇖZpvISM!/(jg|o&%X4 J'Z=L=@urfJ&OQ>`IVNRV+PV(1I5ֹTKEꂻkhԚnH;:Ӵpȧ/w(ln3.ݹjX6LΡxX/^bMok[ӎM/+M<ھ]`u J.B3_C@+_(_adߌ]֥_]pg% M5b a.-1HwN+>mv0MZl*Zӹ3˒ ʆY9o3-KeS~dtTOҽ-Eah*S-PRIV%( nU gVj¢
us: o;f\DKm$ifkT5u2-'e]6k_>lfF}m.b2T7@7K,ùHQn&G1fE2/Kz pHdz
H[&\H+g ׇx%!i|2K8FЄi^kD}V%{0;g[C <'5s>z? 0uXU[ob躷гe̗sD(u3bUQ\Xv㡳5^<;<x#M
+';7NuB@zi3ͶڱH3 v6Xv?Nď9ؾd;ܛnKP6 jNke {ʧl
ZzԤi*W!6R3eOӴt"I3 ܋8*
d
3\ӄx*)pq͡b<]]ˮfkaB. k>:6:NKr;NOZE딱T.V7yu:?` jg؍9|lD|.] T?KBf̠a1q u
:XST[Xyz} **u[
^6bFuI Cy~m sWϨa{XUHz%;X-ˉ
RxڼiqڷS"%٢e% *9AVc`
ַ^`Tn@/%迢x7s$2,E[t6yqOA%ɮ-4RG¤wگȨi_cSnn|z]7O_'k>WWS?c8Nul}* C9ݮ+1&olT )lX6T
ijn#4t^o#eԉwi:Hx=yWo ܀~1Xfzj(!X6.*m}4MOrͅeI^nAzϱIS:C.MַƏ }4 zv GL{.km)#ˍ%zIxG1X[ ІG-e_cfJnفYm4¬(%!A:{NJ^ qZaհ#NttI<2 Y65.ܮ^]W,#[HTS"/ Ks^9`(͌F 4KmSw9VB+M) jDYΩQ 9r]<]
{~cG*chE=E A. 8{] 0tǦ G:(ؗYs* %XUύJB_-&NFAMErUqS;ʳAg?',Fۄx kpƈmK O<Z<^kpDk+OsŷVՃpBv5YՓ[d٣;쫊~t-1Fhln
؎p\ ;)4-ISNRYJ͙ժwM$Coj1`F28-: PIɱM.7RG*]&^rkP!!Ƶ |~1UlټbLl= &Y%,wJv
bwU}n-l-܁6<_=XӬ̘: dDC
ՅI@yg,o,Bmҷ ,C@7%/
@ ( 9Mchr0ҟzg͛t/vnRV0.ڧuV#a2R#fq"s{mŅ (F>r-X¨ƀ<E8Mg+8ΡPd PĂWcv j(2^ NeAkn*Bsly|2g=usn-S˲ ?h9dpzYVs@fL80q Id<C?gzGȇ0unG0`Hy\~zh<vh CJ['3=> q ">_ I/[Y+>f{a(ou]-T4όS^x2olLZsFn}ufu^\_+eVmr:X3&;gtp1'$ܘ+ |joq4 ?'^:)9%ɗY9жч|
+_ҰQ-XeV8kf r!}q &Vy@dN{.5>h kj~mO1J ^K!kЇOlV72h
F&^o2ST. .n xB @kn(ܽ#Cq8x'cI+d L_1~scf`Zl`p| F' e XrggRS)2cm%~e
&(NOTaa0_ c^_DDUդ3ǂP&:4R@5XBwjG)k|tӦZ)کӃ cthL*VX #乒YaB\mp':ЂpF슛iRUbN챦1`]uQ5TD &z H,fej n6 "L40K|
CxIV<yu#J0M5KVA37 j%jQBQv`Bz= f *Ex7!ZRgk\c|-W,n"-<h"%TPI5vi)TIF)A B>-oA ;I\V KK >-]͊%$vHfi:A2\ DV 7b= /XS.7dxiZמr>gLQ{f"N mM`Wܷ ݜ( b(?rDaZjCGa4|E ̗ "X%:U`*
fcsKYE
&~ Dͨw7 @`Ju:pЖC[1<+sHrlڭ?<Ϗ#0,cK+ÃAXJ6{` J]F-
`eA 8VypRuZXaf p_ /lҥ B[ƶӒmeMդDw I0]4`ph+hS_աi+L;=6'Kc4KU]F@BT*@DȐzr"X=ZD ;}CK~2k
<W *d @͍!*$1zցWIU=Td 㘏=,Ǖ I5%nXiw
b%7 $H6,JDk¢հ %\wS[ [6GZ "9W7"ݤ.JY?@9/1nY%:oœ6pʜ,hT䫌\pVO%EuY =G%^<3peO7 u!^SH 1 \){J,&`7F~`qQkp:|XXƲuYV}&?\c}& Fbz+Tؠm!/o*F*l,6R<Ӡ*(ޟ{FSj;RoЧ LkA*>3O-kաZJAE\u|c68%| PQXj[_jGZN;.dCJ"eK8ek57B62SYLY/^9
|h`VgM4o^# ۉL#,^e~䬛f9K,I#u_/H@xjQ2o it 9ǜ+G^ xj.) f67ݲ$HJy0x,jPW%)u< xeC} /4LJ
Jvج\tu4.4&=iapGp>R$UHǽH%8\߉"C;_CQqOK#g7 x) Hvw7K[Ϥ̖O x*kVF i6u|E : r#o0ѿD[6ƚQR>HDmzJ"us*}W W#~:U6A ]:PF(ގoO6&htn$ 2re`YΥh>H-Wox;Y2bĝkڢvY6nJe !,w* wa* '#!L9D仔x*7Y>,%}
QYV^l?*Λp
|1UI'*tZ"cCbrx"xcCk[^ _X+Ӻ~4
;40v*8ݻ1X'oQ6&
߉ַSƘd4vMR,.Ӳ(hII5
g{e`:<Tx,pݳ5.ۖ$%6]'CDԦ>%H9$Ȫ= \vO2'uQ6e
!lMgZweCpٍybXs)s=
tmB13foC#y7us{&ߔ?D\.dU~Ap oQE`|eJ 27:1Rb976αRts+fmݧP" @Zv V )^QL;߾=ZlZ2u p;[<{zj,t`W81T:Ue
ߒ"{>
n Ap,_ƔhP镄o{ntoDԄbP9OZ6^c\/~V Ss_
ql\ okEb_ WoW,G?BO-G J4I^~#tOw|_cB}D' Ga#2jPNQ
BQA">p
(S>-*۲*dKb}-V[Ooq M6PbڻMp ;3zk:.a1C3CE4WhGp)D5ŗM+ ,
leUt| UVi
9,M/p{k`$S0~y+Ć9}]葈`ـKIC ` LUQQCf=]2+gֽء2pܒ#sC\k@ipbiym&]Zy~=_ A_0T\!uۋ>W6vɋfbnX(ӂԐWD-x͚r8*r_?K-(ωM LrB<Z'tƴ<r.ر"
/4N rhⓚxz) .fw,(+gٳN<<h<:hxvk#Ozӌڋ YMg,LHВք|QT'I42j+!KI.^rW>
;r!k%t/Y
AWȪf
t/ LǿriaLmX\њeir( 2:_bule}YU',Q\˷pHgS|-O4I9WFF%tSdS7MXkyY5<{b
Ҡ*M7a>0،dB HX Z<S me5 p,ùqS gyү}_x~IcsYI6/U&OKJ]i t/ 9taż\̶H Wx:,{q" {,G
8wgGAV^IyfCӟi 9z[PfU^=ky/'Aũv+y.vxDk\i;E~ZUzk/~_2ޕ=} wZ#N+8_( /'>g1|V{)zP[vǍ5OjL Ie|pW7%к3s P6SF }҄-I\@ޡK:be(3ngNBΠBT>0r#W''T>
!>MΉ骊945X)7 eŻ9/=ۃ/ S8O!]eBIeMJx.)g/jt쭷7ͪInpa3gzAXn v[JƞexB`UJim%iu)
7
ZqFŚE`zkv3܊_ j M\
sMeUQZO CC*)5] ]*ȫ_O+W4LlI
x=SYw`?/$?i+"\0%+4NM3zjD'jDž`/Gu,`VY g)bXSV*Xؙkޱ=ֿv9=镯 |8V%&E&u-u땿{&Jnrn;*"/VRH Ж~?rp4mW?eW7R+{*T qK)`K m BدV; bElݑ&QZ>=w]@h _}#5wU3EE`':jձkhwVK,48鷎_X^P+Z +qXǬ˾Ŀ7[EKw
mvrG6jO@3I%RIN_r#F$ZjXKNl/{YgM&vh
DC@}ڄr)w
OTj=P/&q6.JskFfh[' 8KxcrhW
\-K; 2O aF 'hU"6&e[H~a+U5gǐE Ew,7w?9XgH5paV}p:~CC5/@9;x-UenOeGm9w|>WKMюaI`Fb/ RZ_X8HH0'fN_u>`˱ XwVhRvqU&4~
N![jR76ZC\'g\ɒSi9
; \\ށT$1gv,l]ˉ9jfYy%JǏ05(VjJIIފzֿ\<mܗYW {mnhŝ{T߫w{ӌ6|-ԉyO#qT5tսɫ?[y; m3FO'eT?xqz<ْ[zGv>Bχ2OG h2a o``````````` e#ƋثW h yGo{'l?F>Oeq_e})^ӏsv\^^2oz%N"GxwN<bXO]Q S r7!{ Ä}$v ^.O3ӹ`ߎgv >Vճė0^[SvSlzxwQ H=x#oe7 _4c˦w.{}dc+{ ~fqi 7D[g
CQ?YlM<"r8V ܉O֚N \ԣ)[G<;P̡d,K=z;%x ~~6W=}K`m;Pk
g'
,lx gao Iaٯ
e}}//͡="mD)r-1GH@cn$\^$b#e`8=S,= <dO2z ,r62YM0@=b3 }
l
{Y62/V;eNc#H$$Y]aB {
lF{wG>ݴYP z2$Z A2.8=g|w UF
6O2#mY+q@Xd ״y\0=mHѝ 1,v6= Y 3v|e@ލph=ifLG^ Ѝ4;ebkz {)~7~!l~L A/:fv/1tq4Y:}l|k z-
Kg1l-]|qZ Huh7 dHJKQҸ| /.ñ-m58Ƌ +Z!r7dʤ<#m og[NeY }pGmEB~O\{n}˽\Qk#b @]d] A`v_ ]0 j킾`lp_ /h툿 ]Al ] P*XTT
T-`@. ڂbmaqF-+({aR6'Qbb J<܈PhWhF7h4ō܈`dͰh+^,a1ў#tF1M t#݈x; iN̵ىv&8n4bL̺C$1sc &Et(n,ÄEbHL8&jF FY$E#c(k,Z
£0F #(,F#
ʣ8F#Z-uLZq"q*c=Ԅs`4$e @I=Q Xh&I 6Q#a"
-0MR 18Lq+Eb8L-FPp(\, bH,q[0EcyUO}6,"'Qq/J$1GbĬ8 *Hb0hbe0|dBWIh&Тu &Mz (5q[pEc%{ZbI=aNB<pMc,AVBgΖ
A -(d13Pr6Z77P9bHJwBJ/1%x} BЮW)r 'ZtSu[b7jEpi@ꖠqo~$/ &Pst1a$0T/*'Hb adXhQdX#ĽIP1INQ^2 aes
ы0^V- a HbG%-
=(}鋏0_r- a
$1c& EbL#/7FY<0p%xtP\%DOꚯUAIصȭv- 0` Z0>+#>"X0 0000z/z]v(gfk@]%x9,.f\qDT^oYnynVwF9цl<FW
W3"/!GV$0uRέkG6jkceȩlY
h7l PGq.:s4os]\dޞ H6絵oKfr7H玲|,&K7u~\ȕ;so>~Y_T֞h`*ШͼJɴT-ݜT͒ M (-a.-jq~6XQ;i,gܒ, Ӣ4%i,`=ѳ;#\
JYq ZCLݰF=
gi <ZhwJe+rS洵H.E7˒Nt@ T'" 5 fA]I2}JfBjմ^8NVB"{MGi@é4r*PmRگU[1Jp'Ӕ꺕fi-ykƽ<қD(uQA҈
/L߆ddR,z8M:r~a{ ASa7rr:Jd%zWE]*TŇs= - R)FT0xhHEA~FX ,9aB!cQ TN4یxIi{+08˰ h576Ql:pwZALNQ- t%'7kvlF0C}x'#cS 0e3!kA
U-ZExT"TtTA?
* ~|Q 1?2(<7?Si ! U
Xӵ )`iV|(> Qo2td9VpG1s (?q$vPQA)Z= Ꮨ{H "QC!HpAy9pHQ ?OGj:a%uT^')s`H< nG=0i/XC`z h;'ݖ?@_ >'/ӳqӟ:@A֬\>TL͖?3F?dـVd?do]hDc=duS?EyPC3\P%Nq9!zc{=IX(ty^PBx+ڑ<DQ :DlC {CBOriQ# "xenCwzR<ꫨhWװ^C;)9?D ˇv,8~ nƖrwt#<3g&ruF" J&9"!g+b]C$!!"3mʻ+80dOw8 ,Q6H$jhF)th'C$ Cv#IC@ReJ֎IY t翬c`bGQ 7ULpkPDrԪK<㺛6uY
IkH~r$` d]7c:#" >,r4ܬ:udW odΪ@8yh<HkYcI#~_w-E|&l_?\TP!(nB\`k%(u4I8we%LYĕ 1vRDREQ`5r4E9 " }HG_$yErX"9 lߒ/CT5@ڋErX"9 }ox}#^oѪ ՋD#xB}HG 4HG_$IPEr
"9 |ohNjr E?:Bx7jԋHDgdz?:<H/*<?/<4/`"9H&9"VHn>d6[¡Ϻm37N7s 8>irEn0-{ ]9@K,^3 -;5l|-@үb ',j &N [cBKXD e*@6:Б/Q931PCG 1 @˵ *r- 6@* > Bߘ' kMk-NAl#lUky].0k* tЀ0Zo a $DHP7-#J c3U
EKC-sZFԒTHgBl#ײҊŴPJi$ajy#^ǫ}YEbhkqu+S*MN4 ?XH2pAP 3ꈅ%Vp !D
Uz:DX
-@4%r- O y6"evgT յZYV9s晜!g'20HN `} s$I']-WVXd$wv6}il XJ {zsSj}GNv}z!J;#!eNMABԀ,ow;텎Lz'r |ڧ K!g!8ȝ v|'(bm*!4~: t
hpTSdv4T E#pWUP1v}.*fkEC$ atPUN -IW G*C57Xw;kpŘC@K>U߰
^\0`.O5o iEL8 o1%_J1/wIzzޓʮo1BB%_a2tݟCXs.44vk H9 渆 7*+g0_Kp%áx-^V] ~\j)2˩vLַ#07]G}B_O@H % p%жT TZ.FeOtW-!ptM;oM{pMU5ń¯[P$Op k{ ]*_~s''Usñi>A_ D{/kjvJbg)JChlOFh,
nZ vy10.a vgk0m].c;0&KY{Y\ =65Z匥ge$?%Mkx4 m%5v\ {{Zκc1'WcOp?2s1b ,UkxlNiDA!s1uiXXKȰ5|ƊL"nR1}xiI&9qi&a!_j.U'!;|$ lzisn'b} ^ dOD8 YԦ)q nbXaB,]widЮig<#f-^0#_/|bo)E/V 4{N9h%nx;b) /A:2KR#&i: Ws2 ]A;6sgS)&3Ak&Bŝl V D>Xz1"n/OŪW|OM~#ꈛqκykL> !9 =roǞ.ikɅm8zHk@]* 3[<+ \V&_#t`.+ÐdfK&> ןqc#;`rR뼗s6]u\J:#"'35Puyg.)ә d,+)X$OvBeeKc˲ 9ԙ ,Q,CÈ=9#%z\mnGbW֤{N\EL_Y$6=^ 4õ Zg KRujw FfoȚv iXW-_ߛ(E7o'!6ge{4NYzԝ{k :ћЛiwc \8)r=2Bj?k g^Ͳo ߉o $b& |9cZ|yUz <Fy<\FB IicS9m RD%;j KOf @谀R
;f@Ɯcˁ 3h`L<`6M <m}x]9r5ʇ0uNu0Z]qޥk_ e;xO 9Q!#qpY$,(AUy=pĪ{H7D-lթ~]epD1jh:
)QlOMT&쨤J
=pMt SQ)T>H vϼRF12лQV{,CՕI*dAAF*T|yDYt<Q DU-sO"znF>E4$`z$ ;EG7ZȝɂX"QC>O jh$$JzDRd$22=nh&@Uڊ碨\n"7McyMEjAC}q"Q3(e
o6UA
Rȍ$joݨow2(u2B$r|e
eL<-tE_`cCS ߯Q_=wh俺2o{e(bzKTOs^?啜Η?&y'ToK QAxgg?( q?J.?(⣯
Ss3a:K7dѓ_;wts$ϗ`ć0c(Vۼo;8=E2_I^!rɾ]cU6 ܫ Z7-Fds ^_Ӊq L7%Z0V'$")g*+}0e JuMzҭɔ zY;*+vј\V>V12GTnި|[W>o{AAAAAAAAAAAA ( z& ` f