Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 9: Capacity Planning 209
profiles requires a domain account. To use the incremental import feature from
Active Directory on a Windows Server 2000–based computer, a domain administrator
account is required.
You can import user profiles from the same domain that SharePoint Portal
Server is installed on or from any trusted domain (although this is not tested in this
chapter). You can also configure and customize your connection to Active Directory
to import users based on specific criteria as a script in an LDAP query—for example,
all users who belong to a specific organizational unit (OU) or only users whose
e-mail address property is not empty.
If you are using other platforms, you can add users manually. You can add
more properties to the user profile if you need to extend the information that you
want to be displayed about a user. However, any such updates will not be propagated,
nor will they update Active Directory.
Updating User Profiles
After the first import from the directory, you can schedule incremental updates
based on the frequency of users being added to Active Directory. In most cases,
scheduling incremental updates daily and full updates weekly is sufficient.
Planning Audiences
Note Removing a user from Active Directory and fully updating the user profile
does not remove a user profile from the profile database. Nevertheless, a
user who is removed from Active Directory is not able to access the Share-
Point Portal Server because users are authenticated through Internet Information
Services (IIS), which authenticates users through Active Directory.
Audiences allow organizations to target content to users based on their job or task, as
defined by their membership in a Windows Server 2003 security group, distribution
list, organizational reporting structure, or the public properties in their user profiles.
Audience Rules
Audiences are created based on a set of rules that you define. Definitions are based
on the following items:
■ Windows security group, distribution list, or organizational hierarchy
■ User profile public property
■ Organizational hierarchy
■ Distribution lists