Verify Prerequisites

Ensure the server on which you will install PeopleUpdate meets the following requirements before installing the application. You can check the full list of system requirements at System Requirements.

Checking Product Versions

You may need to check the version of certain products you are using to verify they meet the PeopleUpdate requirements.

Internet Information Services

Each operating system Microsoft produces maps to a version of IIS and you have IIS 6.0 if you are running Windows 2003.

ASP.NET

Go to the Microsoft Knowledge Base article at http://msdn2.microsoft.com/en-us/netframework/aa569264.aspx to check if you have version 2.0 of the .NET framework installed on your web server. If you do not have it installed, the article contains instructions about how to download and install version 2.0.

Creating a Service Account to Run PeopleUpdate

Most environments allow a default PeopleUpdate installation, with no custom configuration for your environment, to search and display most attributes in Active Directory. Editing and updating Active Directory attributes, however, requires elevated privileges and most environments will not allow a default PeopleUpdate installation to update the directory. By default, PeopleUpdate uses anonymous binding to talk to Active Directory and therefore only has very limited privileges that are typically set to only allow searching for a small subset of Active Directory attributes.

Web Active Directory recommends that you create a service account in your domain dedicated to running PeopleUpdate. PeopleUpdate uses the service account to bind to your Active Directory to perform search and update operations instead of passing the PeopleUpdate user's credentials to Active Directory for binding. Web Active Directory has chosen to implement the service account model instead of passing user credentials to simplify the Active Directory configuration required to run PeopleUpdate. You only need to configure Active Directory permissions that delegate read and write permissions to the PeopleUpdate service account.

Delegating Active Directory Permissions to the PeopleUpdate Service Account

PeopleUpdate requires that your service account have write permissions on the attributes you intend to update. Once you create the PeopleUpdate service account in your domain, use the procedure below to grant the necessary permissions to run PeopleUpdate.

To grant Microsoft Active Directory permissions to your PeopleUpdate service account:

1. Open Active Directory Users and Computers from the Start > All Programs > Administrative Tools menu.

2. At the root of the directory tree for the domain, right-click the root of your domain (or another OU you want to allow PeopleUpdate to manage) and choose Properties.

3. Click Delegate Control to open the Delegation of Control Wizard.

4. Click Next to proceed past the wizard's welcome page.

5. Click Add and find the PeopleUpdate service account you created previously.

6. Click Next to proceed.

7. Click Create a custom task to delegate and click Next to proceed.

8. On the Active Directory Object Type page, ensure you are delegating control to This folder, existing objects in this folder, and creation of new objects in this folder. This option allows the PeopleUpdate service account to manage the entire domain.

9. Click Next to proceed.

10. Check Read All Properties and Write All Properties to allow the PeopleUpdate service account to read and write all properties in the folder.

11. Click Next to proceed.

12. Click Finish to save your changes and close the wizard.