Basic Administration > Managing User Participation > Participant Administration > Understanding Participants (Users, Groups, and Organizations) > Working with LDAP Directory Services
  
Working with LDAP Directory Services
When your Windchill solution is installed, a single LDAP directory service is configured. This LDAP is intended to be used to contain your users and optionally anu user-defined groups.
For example, if your site has a domain of ptcnet.ptc.com, if you supplied "windchill" as your organization name during installation, and if you accepted the default LDAP directory service options during installation, your directory service structure is similar to the following.
The option to save a group into an LDAP server is controlled via a setting in the JNDI adapter configuration for that LDAP server. When you create a new group using the Participant Administration utility, you can select which LDAP it is created under by selecting the desired directory service as shown below:
In Directory Service, the group is added as shown below:
If you use the Administrator to create a new group from the site context and select the Enterprise LDAP, the group is added as shown below:
If you use the Participant Administration utility to create a new user and select a custom LDAP, the user is added as shown below:
When creating an access control rule for a group using the Policy Administration utility, select the directory or the database repository in which the group resides to find the group, as shown below:
For more information on the Policy Administration utility, see Using the Policy Administration utility.
By default, the Windchill search for groups in a LDAP server uses the LDAP search scope of either BASE, ONELEVEL or SUBTREE depending on how the JNDI adapter has been configured.
If you add groups through a tool and the following things are true:
You do not store the groups in the default search base associated with the service
You do not want to create a new directory service to map to this additional search base
then you must add the search base to the Additional search bases which need to be queried preference so the search base is included when Windchill searches for groups.
Change the preference value using the site-level Preference Management utility.
For more information on the Preference Management utility, see About the Preference Management Utility.
* 
If your site requires changes in your established directory service structure, you should contact PTC Technical Support for assistance.