This configuration can also be set up with ADAM (Active Directory Application Mode), a reduced-function version of AD provided free of charge by Microsoft and installed with ESF-enabled versions of ES. This may be useful if you are not currently running the full Active Directory, or if you want to test the configuration locally before deploying it to your domain controller.
If you use ADAM rather than AD, user signon will still go through the normal Windows login process, so passwords set for users in ADAM will be ignored. (Users will sign on to MSS or MFDS using their Windows passwords.) However, you will be able to set MSS user attributes using user-class objects in ADAM and see how the ESM modules' configuration options work.
To configure ADAM, see the document "Setting-Up-LDAP-Security-with-Enterprise-Server.html", which is included with ESF-enabled versions of ES. After you have installed the default ADAM configuration, you can create additional users in the "ADAM Users" container with the same names as your Windows users, and use those in the place of AD users in the instructions below.
If you use ADAM, you may have to make some changes to the following instructions. For example, you will have to specify the additional parameters "-s localhost:389" when running the ldifde command to import LDIF files.