New Authorization Store Dialog Box

  • Article

Applies To: Windows Server 2008

Important

Authorization Manager is available for use in the following versions of Windows: Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows XP, Windows Vista, Windows 7, and Windows 8. It is deprecated as of Windows Server 2012 R2 and may be removed in subsequent versions.

This dialog box allows you to create a new authorization policy store.

The following table describes the UI elements for this dialog box.

Item Description

Select the authorization store type

Active Directory

Specifies that the new authorization store is kept in Active Directory. Active Directory type authorization stores are specified with an LDAP distinguished name such as CN=myStore,CN=Program Data,DN=nwtraders,DN=com. You can also use a URL beginning with MSLDAP:// or MSXML://.

XML file

Specifies that the new authorization store is kept in an XML file.

Note
XML stores do not support delegation.

Microsoft SQL

Specifies that the store is kept in a Microsoft SQL Server database. SQL database stores are specified with a URL beginning with the protocol prefix MSSQL:// followed by a connection string, database name, and policy store name in the format:

MSSQL://<connection string>/<database name>/<policy store name>

Authorization store schema

Selects between a version 1.0 schema and a version 2.0 schema. If you have client applications that have been written for version 1, you should select Schema version 1.0. For more information about schema differences, see What's New in Authorization Manager.

Store Name

Provides a space for you to type the store name.

  • If the store is an XML file, the current working directory is displayed (for example, C:\My Documents) and you can type the rest of the path and file name. If you do not type the .xml extension, it is appended when saved

  • If the store is in Active Directory, type the LDAP distinguished name (for example, CN=myStore,CN=Program Data,OU=sales,DC=northwindtraders,DC=com). The distinguished name (DN) must be valid in Active Directory. You can also use a URL beginning with MSLDAP:// orMSXML://.

  • If the store is in an SQL Server database, type the URL used to access the database, in the format:

    mssql://<connection string>/<database name>/<policy store name>

Locations…

Click to browse to an authorization store location.

Additional references