Hello, Our company has developed an open source identity management solution. For active directory and exchange provisioning we rely heavily on Microsoft's directory services API. I would like to know what kind of permissions should a Identity mangement software service account have. the Identity management is used to do the following : 1. Account provisioning 2. Group provisioning 3. Attribute modification (including hidden attributes) 4. Object lookup. 5. Mailbox provisioning. 6.Account authentication. Thanks.

Post here you will sure get some help http://social.technet.microsoft.com/Forums/en-US/category/identitymanagement/http://www.arabitpro.com