HP Ilo 2 User Guide
Here you can view all the pages of manual HP Ilo 2 User Guide. The HP manuals for Server are available online for free. You can easily download all the documents as PDF.
Page 141
NOTE:InstallingDirectoryServicesforiLO2requiresextendingtheActiveDirectoryschema. ExtendingtheschemamustbecompletedbyanActiveDirectorySchemaAdministrator. •ExtendingtheSchemaintheMicrosoftWindows2000ServerResourceKit,availableonthe Microsoftwebsiteathttp://msdn.microsoft.com). •InstallingActiveDirectoryintheMicrosoftWindows2000ServerResourceKit •MicrosoftKnowledgeBaseArticles ThesearticlesareaccessedusingtheKnowledgeBaseArticleIDNumberSearchoptionon theMicrosoftwebsiteathttp://support.microsoft.com/....
Page 142
1.InstallActiveDirectory.Formoreinformation,refertoInstallingActiveDirectoryintheMicrosoft Windows2000ServerResourceKit. 2.InstalltheMicrosoftAdminPack(theADMINPAK.MSIfile,whichislocatedinthei386 subdirectoryoftheWindows2000ServerorAdvanceServerCD).Formoreinformation, refertotheMicrosoftKnowledgeBaseArticle216999. 3.InWindows2000,thesafetyinterlockthatpreventsaccidentalwritestotheschemamustbe temporarilydisabled.Theschemaextenderutilitycandothisiftheremoteregistryserviceis...
Page 143
a.Usethemanagementsnap-insfromHPtocreateiLO2,Policy,Admin,andUserRole objects. b.Usethemanagementsnap-insfromHPtobuildassociationsbetweentheiLO2object, thepolicyobject,andtheroleobject. c.PointtheiLO2objecttotheAdminandUserroleobjects(AdminandUserroles automaticallypointbacktotheiLO2object). FormoreinformationoniLO2objects,see“Directoryservicesobjects”(page145). Ataminimum,youmustcreate: •OneRoleobjectthatcontainsoneormoreusersandoneormoreiLO2objects....
Page 144
2.UsetheHPprovidedActiveDirectoryUsersandComputerssnap-instocreateHPRoleobjects intheRolesorganizationalunit. a.Right-clicktheRolesorganizationalunit,selectNewthenObject. b.SelectRoleforthefieldtypeintheCreateNewHPManagementObjectdialogbox. c.EnteranappropriatenameintheNamefieldoftheNewHPManagementObjectdialog box.Inthisexample,therolecontainsuserstrustedforremoteserveradministrationand iscalledremoteAdmins.ClickOK. d.Repeattheprocess,creatingaroleforremoteservermonitorscalledremoteMonitors....
Page 145
4.UsetheLightsOutManagementtabtosettherightsfortherole.Allusersandgroupswithin arolewillhavetherightsassignedtotheroleonalloftheiLO2devicesmanagedbythe role.Inthisexample,theusersintheremoteAdminsroleisgivenfullaccesstotheiLO2 functionality.Selecttheboxesnexttoeachright,andthenclickApply.ClickOKtoclosethe propertysheet. 5.Usingthesameprocedureasinstep4,editthepropertiesoftheremoteMonitorsrole, addtherib-email-serverdevicetotheManagedDeviceslistontheHPDevicestab,...
Page 146
Eachobjectrepresentsadevice,user,orrelationshipthatisrequiredfordirectory-based management. NOTE:Afterthesnap-insareinstalled,ConsoleOneandMMCmustberestartedtoshowthe newentries. Afterthesnap-inisinstalled,iLO2objectsandiLO2rolescanbecreatedinthedirectory.Using theUsersandComputerstool,theuserwill: •CreateiLO2androleobjects. •Adduserstotheroleobjects. •Settherightsandrestrictionsoftheroleobjects. ActiveDirectorysnap-ins...
Page 147
ActiveDirectoryrolerestrictions TheRoleRestrictionssubtaballowsyoutosetloginrestrictionsfortherole.Theserestrictionsinclude: •Timerestrictions •IPnetworkaddressrestrictions IP/mask◦ ◦IPrange ◦DNSname Timerestrictions YoucanmanagethehoursavailableforlogonbymembersoftherolebyclickingEffectiveHours intheRoleRestrictionstab.IntheLogonHourspop-upwindow,youcanselectthetimesavailable forlogonforeachdayoftheweekinhalf-hourincrements.Youcanchangeasinglesquareby...
Page 148
EnforcedclientIPaddressorDNSnameaccess AccesscanbegrantedordeniedtoanIPaddress,IPaddressrange,orDNSnames. 1.IntheByDefaultdropdownmenu,selectwhethertoGrantorDenyaccessfromalladdresses exceptthespecifiedIPaddresses,IPaddressranges,andDNSnames. 2.Selecttheaddressestobeadded,selectthetypeofrestriction,andclickAdd. 3.Inthenewrestrictionpop-upwindow,entertheinformationandclickOK.Thenewrestriction pop-upwindowdisplays. TheDNSNameoptionallowsyoutorestrictaccessbasedonasingleDNSnameora...
Page 149
Theavailablerightsare: •Login–Thisoptioncontrolswhetheruserscanlogintotheassociateddevices. •RemoteConsole–ThisoptionenablestheuseraccesstotheRemoteConsole. •VirtualMedia–ThisoptionenablestheuseraccesstotheiLO2virtualmediafunctionality. •ServerResetandPower–ThisoptionenablestheuseraccesstotheiLO2VirtualPowerbutton toremotelyresettheserverorpoweritdown. •AdministerLocalUserAccounts–Thisoptionenablestheusertoadministeraccounts.Theuser...
Page 150
Snap-ininstallationandinitializationforeDirectory Forstep-by-stepinstructionsonusingthesnap-ininstallationapplication,see“Snap-ininstallation andinitializationforActiveDirectory”(page142). NOTE:Afterthesnap-insareinstalled,ConsoleOneandMMCmustberestartedtoshowthe newentries. CreatingandconfiguringdirectoryobjectsforusewithLOMdevicesineDirectory ThefollowingexampleshowshowtosetuprolesandHPdevicesinacompanycalled samplecorp,whichconsistoftworegions,region1 and region2....