Active Directory

Certificate ChainThis updated Private Key Infrastructure (PKI) utilizes two Issuing CAs. Both issuing certificates and the updated root certificate need to be installed on machines using UMROOT for authentication. You may need to right-click on the link and select Save link as… to download the linked certificates.

This document describes the basic components in Active Directory (UMROOT) and how to work with them.

This document describes the basics of creating computer accounts in UMROOT.

This document provides configuration information for  LDAP and Global Catalog access to Active Directory (UMROOT).

The following list are the ACLs applied to each delegated OU in the Accounts OU for each delegated administrative group. The effective rights to users are the permissions granted minus the permissions that are denied.

Departments that wish to manage user or computer accounts in Active Directory (UMROOT) can join the U-M Windows Forest as a delegated organizational unit (OU). This document lists the steps for doing that.

This document describes the prerequisites and process for administrators of delegated Organizational Units (OUs) in Active Directory (AD) to move the uniqname accounts of users from the People OU (where they are created by default) to the Accounts OU that is associated with their unit or organization. This allows administrators to control user and computer settings in their group's Windows environment.

This documentation is intended for U-M Unit AD Administrators.

This document describes how to configure a Windows computer for pass-through login.

In This Document Overview Prerequisites for DFS in UMROOT Setup DFS in UMROOT Advanced Features Overview Distributed File System (DFS) allows users to access and manage files that are physically distributed across a network.