When your Windchill solution is installed, a single LDAP directory service is configured. This LDAP is intended to be used to contain your users and optionally anu user-defined groups.

For example, if your site has a domain of ptcnet.ptc.com, if you supplied "windchill" as your organization name during installation, and if you accepted the default LDAP directory service options during installation, your directory service structure is similar to the following.

The option to save a group into an LDAP server is controlled via a setting in the JNDI adapter configuration for that LDAP server. When you create a new group using the Participant Administration utility, you can select which LDAP it is created under by selecting the desired directory service as shown below:

In Directory Service, the group is added as shown below:

If you use the Administrator to create a new group from the site context and select the Enterprise LDAP, the group is added as shown below:

If you use the Participant Administration utility to create a new user and select a custom LDAP, the user is added as shown below:

When creating an access control rule for a group using the Policy Administration utility, select the directory or the database repository in which the group resides to find the group, as shown below:

For more information on the Policy Administration utility, see Using the Policy Administration utility.

By default, the Windchill search for groups in a LDAP server uses the LDAP search scope of either BASE, ONELEVEL or SUBTREE depending on how the JNDI adapter has been configured.

If you add groups through a tool and the following things are true:

then you must add the search base to the Additional search bases which need to be queried preference so the search base is included when Windchill searches for groups.

Change the preference value using the site-level Preference Management utility.

For more information on the Preference Management utility, see About the Preference Management Utility.