Best practices for AD check parameters. (NETIQKB56198)

  • 7756198
  • 02-Feb-2007
  • 10-Jul-2007

Resolution

goal
Best practices for AD check parameters.

goal
How should I enter parameters for AD checks?

fact
NetIQ Vulnerability Manager 5.5

fact
NetIQ Secure Configuration Manager 5.6

fix

Certain AD security checks include a parameter called OBJECTTYPE that accepts Domain, Container, or OU as the input parameter.  This OBJECTTYPE is case sensitive so please ensure they are entered as described.  For example, if you would like to use the object type of 'domain' you would type Domain (not domain).

 For the Object type of OU enter parameters in either of the following 2 ways:

  • Specify the OU's (Top Down) separated by a \. For example, to see OU 2 which is in OU 1, the OBJECTNAME would be "OU 1\OU 2" (without the quotes).
  • Specify the OU's (Top Down) in our namespace format. For example, to see OU 3 which is in OU 4, the OBJECTNAME would be Windows_OU=OU 4/Windows_OU=OU 3  
For the Object type of Domain, enter the object type as Domain (not domain).  Then enter the name of your domain.  Example: netiq.com
 
For the Object type of Container, enter the object type as Container (not container).  Then enter the name of the container.  Example Users.  If there is a sub container use a \ between the container and sub containers.


Additional Information

Formerly known as NETIQKB56198