Setting Microsoft Server Credentials
To enable Universal DDI to synchronize data with a Microsoft server, do the following on the server:
Create a user account for Universal DDI .
Grant the user account the necessary permissions.
You can add a user account either to the Administrators Group or to specific groups; in the latter case, you must explicitly grant only the permissions necessary to access the server’s DNS services. The sections below provide general instructions on each method:
Adding a User Account to the Administrators Group
Adding a user account of Universal DDI to the Administrators Group provides total control over the Active Directory domain. Do one of the following:
If the managed Microsoft server is a standalone server or a member server in a domain, open Computer Management, click Groups, and add the user account to the Administrators Group.
If the managed Microsoft server is a domain controller, open Active Directory Users and Computers, select the domain name, click Builtin, and add the user account to the Administrators Group.