http://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspxWhat we are hearing from our customers is that they want their applications to become better corporate citizens. They want them to rely on user data in a global directory service, rather than adding their own proprietary repository of that data to theen-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#83802Thu, 04 Mar 2004 18:05:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:83802DarrellIf the organization you are developing for does have a directory service, but you need to modify the schema. In those cases, I have relied on AD for authentication, and then additional attributes linking userIDs to permissions for authorization. <br> <br>Is there an easy way to keep an ADAM and a real AD synced?http://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#83807Thu, 04 Mar 2004 18:15:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:83807DarrellOk, I just read your post about MIIS. Thanks.http://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#83814Thu, 04 Mar 2004 18:21:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:83814Darrell Norton's BlogApplication Security and Active Directoryhttp://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#84260Fri, 05 Mar 2004 07:47:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:84260overflowhttp://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#94704Tue, 23 Mar 2004 22:11:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:94704Dev Noteshttp://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#94732Tue, 23 Mar 2004 22:12:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:94732Dev Noteshttp://blogs.msdn.com/craigmcmurtry/archive/2004/03/04/83782.aspx#200799Thu, 29 Jul 2004 19:26:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:200799Darrell Norton's BlogApplication Security series finished