Active Directory & SharePoint

A new feature of Microsoft Windows SharePoint Services is account creation mode for Active Directory directory service. This feature replaces the local account creation feature in SharePoint Team Services 1.0 from Microsoft. Use Active Directory account creation mode when it is necessary to generate new user accounts than using existing domain accounts. For example, an Web service provider (ISP) might need the ability to permit SharePoint site owners the capability to generate user accounts or invite users to collaborate on a Website where existing domain accounts for those users do not already exist.

In order to run Windows SharePoint Services in Active Directory account creation mode, your Web servers must be members of a Microsoft Windows 2000 or Microsoft Windows Server 2003 domain.



To configure any way to perform the following tasks on the domain controller, SQL Server, and Web server in the order listed.

• To configure any way to perform the following tasks on the domain controller, SQL Server, and Web server in the order listed.
• Create an organizational unit (OU) for the user accounts.
• Delegate permissions to the organizational unit.

Prepare the Web server computers:

• Install Windows SharePoint Services with the option of the farm.
• Create the group's virtual server management applications.
• Create the configuration database and specify the creation of Active Directory account mode.
• For IIS traditional accommodation, use HTML Administration pages.
• For IIS scalable hosting, use the command line utility stsadm.exe.
• Specify the mail server settings.
• Extending a virtual server.
• Specify how to host the host name for the first site (scalable only).

The steps to prepare the domain controller and SQL Server is the same for either mode. The steps for the preparation of Web server computers differ slightly. When using scalable hosting mode make sure to use the parameter of HH (only available from the command line) to create the configuration database, which is covered in Configuring Windows SharePoint Services to hosting scalar mode.

Create a domain account for Windows SharePoint Services processes

• In the domain controller, create an account to be used by Windows SharePoint Services to create new domain accounts.
• For example, create a new account called SharePoint_admin.
• Configure the account so that the password not be changed at next logon and does not expire.
• If you are using Kerberos authentication and account security is not a network service, set up accounts as a service principal name (SPN).