Re: Know anything about controlling AD via IXS and user profiles? [document scanned and determined safe]

Steve,

Not sure if you ever got your answer, but we do that here.  We have a
Windows 2000 Server setup as a (backward compatible) PDC and it runs active
directory.  When we disable an AS/400 account it is disabled network
wide.  Works pretty well, but your windows admins won't like it.


Hope that helps,


Keith Blazek
MIS Coordinator


|-----------------------------+-------------------------------------------|
|   "Steve McKay"             |                                           |
|   <steve.mckay@xxxxxxxxxxxxx|                                           |
|   m>                        |                                         To|
|   Sent by:                  |                              security400@m|
|   security400-bounces@midran|                              idrange.com  |
|   ge.com                    |                                         cc|
|                             |                                           |
|   04/01/2004 04:46 PM       |                                    Subject|
|                             |                              [Security400]|
|         Please respond to   |                              Know anything|
|      Security Administration|                              about        |
|          on the AS400 /     |                              controlling  |
|      iSeries        <securit|                              AD via IXS   |
|        y400@xxxxxxxxxxxx>   |                              and          |
|                             |                              user        p|
|                             |                              rofiles?     |
|                             |                              [document    |
|                             |                              scanned and  |
|                             |                              determined   |
|                             |                              safe]        |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|-----------------------------+-------------------------------------------|






We're looking for a way to delete an active directory account on our
network
when a user profile is deleted.  Is there some way to sync the user profile
with user accounts on the IXS and, in turn, add the IXS to the active
directory domain (or whatever it's called) as an administrative server so
that, when a user profile is deleted, the user account on the IXS is
deleted
causing the active directory account to be deleted?  Or is this wa-a-a-y
out
there?

Thanks,

Steve