Configuring MMC for Active Directory Services 

Use

The MMC can be configured so that its structure and some of the information it presents are taken directly from the Windows 2000 Active Directory. The Active Directory is an extensive hierarchical inventory of all the objects available in a network. Special services make it possible to access and manipulate the information stored in the directory whenever required.

Configuring the MMC on the basis of the Active directory has the following advantages:

The MMC can be configured to access LDAP directories other than the Active Directory. In this case, additional instructions have to be observed.

Prerequisites

The R/3 System must be configured appropriately to support LDAP services.

Procedure

  1. Start the MMC.
  2. Select Console root and choose Console ® Add/Remove Snap-In.

    3. The Add/Remove Snap-In dialog box opens.

  3. Choose Add and then select the SAP R/3 Manager snap-in. Confirm your selection with Add.

    4. The General Settings dialog box opens.

  4. Enter data as follows:

    5. For Options
    S    elect Query LDAP Directory for R/3 Instances.

    For Auto Refreshment
    Enter the periods in which you want system information in the MMC to be updated automatically.

    For Options
    S    elect Expert user mode if you want to access more detailed system information later when you start working with the R/3 snap in.
    Deselect Always show local R/3 instances. These are automatically displayed in the MMC when the configuration is complete.

  5. Choose Next to close the General Settings dialog box.

The LDAP Directory Connection dialog box opens.

  1. Enter the following data:

Fields

Entry

LDAP Server

Directory Type

Select Windows 2000 Active Directory.
If you want to access a different LDAP Server, select Generic LDAP Directory

SAP Root DN

For Windows 2000 Active Directory no entry is required.

For Generic LDAP Directory, enter the distinguished name of the SAP root node in the LDAP directory.

Directory Server

Enter the name of the server where the Active Directory is located. For Windows 2000 Active Directory, an entry is only required, if the MMC is running on an NT 4.0 host.

You can enter several host names separated by spaces. In this case, the first functioning host is the one that will be accessed.

LDAP Authentication

Select the mode of authentication for accessing the directory services.

For Windows 2000 Active Directory any of the offered modes can be selected.

For Generic LDAP Directory, select anonymous log in for read-only access of the directory. For read and write access, specify a user and password.

Use Secure Socket

Select this to encrypt the information that is passed between the MMC and Active Directory machine.

 

  1. Choose Next.

The Directory Settings dialog box opens.
  1. Specify the information contained in the Active Directory that you want to be visible in the MMC:
    1. Qualify the systems and instances you want to see by selecting or entering data in the fields Management Domain, System, Host and Instance No. The wild card * is a valid entry.
    2. Choose Show to add entries to the LDAP Search filter text box. Use the Hide and Remove options as required:
      Hide allows you to exclude selected items that appear in the LDAP Search filter box from the MMC display.
      Remove allows you to delete selected entries from the LDAP Search filter box.
    3. Repeat the procedure until you have specified all the management domains, hosts and instances you want to display.
    4. Select Hide non DCOM manageable instances, to exclude any machines from the MMC display that cannot be monitored because they do not support DCOM communication with an R/3 instance. Currently only Windows NT and Windows 2000 support DCOM.
  1. Choose Finish.

    2. The MMC fetches the information specified in the LDAP Search filter from the Active Directory and configures the console accordingly.

  2. Close all dialog boxes that are still open.

See also MMC Enhancements for Active Directory Services