ADAM: Outlook 2003 authentication issues with MS ADAM (Active Directory Application Mode)

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Michael Herman $Parallelspace$ - 25 Sep 2004 15:33 GMT

We're started to evaluate MS ADAM (Active Directory Application Mode) for
various directory enabled applications
(http://www.microsoft.com/windowsserver2003/technologies/directory/activedir
ectory/default.mspx).

One of our first scenarios is getting ADAM to work as an LDAP directory in
Outlook 2003.

The issue is that I've had to enter an *explicit* account/password (and
check Secure Password Authentication) in the Outlook->Email
Accounts->Directory LDAP properties wizard (in addition to the server name
and root DN) to get Outlook 2003 to work with an ADAM directory.

This works but what do I need to do to avoid having to provide explicit LDAP
logon credentials?

I.e. What do I need to do to get Outlook 2003 to use Windows SSO with MS
ADAM?

Cheers,
Michael.

----------
Michael Herman
Parallelspace Corporation
Developers of Advanced Business Collaboration Solutions for Microsoft
SharePoint, Microsoft Live Communications Server and Groove Workspace

Portal and Content Migration Solution Specialists:
http://www.parallelspace.net/sharepoint
SharePoint Migration Knowledge Center:
http://groups.yahoo.com/group/sharepointmigration

Reply to this Message

Dmitri Gavrilov [MSFT] - 25 Sep 2004 18:42 GMT

Most probably, your regular windows user does not have permissions to read
ADAM data. Add Domain Users group to Readers group in ADAM partition. Or
perhaps, add Authenticated users. Then anybody who can logon to the domain
will be able to read ADAM data.

If you are planning to use Outlook Address Book with ADAM, and your domain
is larger than just a few hundred users, then you should get 832474 or a
later ADAM qfe (the latest one is 840991 it appears). Note you will need to
define the new index (subtree-ized index on CN attribute) to make Outlook's
VLV searches faster.

Signature

Dmitri Gavrilov
SDE, Active Directory Core

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Michael Herman (Parallelspace)" <mwherman@parallelspace.net.no#$#spam>
wrote in message news:u9E#WywoEHA.3520@TK2MSFTNGP11.phx.gbl...

> We're started to evaluate MS ADAM (Active Directory Application Mode) for
> various directory enabled applications

(http://www.microsoft.com/windowsserver2003/technologies/directory/activedir

> ectory/default.mspx).
>
[quoted text clipped - 25 lines]
> SharePoint Migration Knowledge Center:
> http://groups.yahoo.com/group/sharepointmigration

Reply to this Message