MDM Self Service Portal Server Overview

2/9/2009

The computer on which you install MDM Self Service Portal must be an IISĀ 6.0 Web server that has the following components installed locally:

  • MDM Self Service Portal
  • MDM Shell cmdlets

MDM services and Web site files install on the server when you run the MDM Self Service Portal wizard in MDM 2008 SP1 Setup.

The following illustration shows how MDM Self Service Portal integrates with MDM and other system components.

Dd252808.35bfee67-cf32-4193-bd59-0d41e89dab47(en-us,TechNet.10).gif

MDM Self Service Portal Web Site

ASP.NET pages provide the Web site user interface (UI) on the computer on which you install MDM Self Service Portal. IIS authenticates the user based on the Windows domain credentials for that user. Administrators can manage the Web site functionality and services by using the Portal Administration page.

For more information about the functionality of the Web site for MDM Self Service Portal, see Deploying MDM Self Service Portal.

Security Group and Access Authorization

The Active Directory Configuration Tool (ADConfig) is a tool that administrators use to configure Active Directory for MDM. When you run MDM 2008 SP1 Setup to install the portal, the MDM Self Service Portal server account is added to the DefaultSelfService group. This lets MDM Self Service Portal access MDM cmdlets to perform wipe requests, enrollment requests, recovery password retrieval, and device history.

The Administrator service on MDM Device Management Server authorizes access to cmdlets for the computer that is running MDM Self Service Portal because the MDM Self Service Portal server has the MDM Self Service Portal role.

For more information about ADConfig and the groups that are created by running the tool, see ADConfig Tool.

Upgrading a Custom MDM Self Service Portal

If you created a custom MDM Self Service Portal and are now upgrading to MDM 2008 SP1, you must be aware of changes in MDM that affect how the portal works . To update your custom portal to work with MDM 2008 SP1, you must replace some cmdlets with revised MDM cmdlets and change certain code to include the MDM instance.

For a list of cmdlets that are used in MDM Self Service Portal code in MDM 2008 SP1, see MDM Shell Cmdlets and Scripts for MDM Self Service Portal.