schema for group membership complies with RFC 2307bis (proposed). Windows Server 2003 R2 includes a Microsoft Management Console snap-in that creates and edits the attributes. An alternative option is to use another directory service as non-Windows clients authenticate to this while Windows Clients authenticate to Active Directory. Non-Windows clients include 389 Directory Server (formerly Fedora Directory Server, FDS), ViewDS v7.2 XML Enabled Directory, and Sun Microsystems Sun Java System Directory Server. The latter two are both able to perform two-way synchronization with Active Directory and thus provide a "deflected" integration. Another option is to use OpenLDAP with its translucent overlay, which can extend entries in any remote LDAP server with additional attributes stored in a local database. Clients pointed at the local database see entries containing both the remote and local attributes, while the remote database remains completely untouched. Administration (querying, modifying, and monitoring) of Active Directory can be achieved via many scripting languages, including PowerShell, VBScript, JScript/JavaScript, Perl, Python, and Ruby. Free and non-free Active Directory administration tools can help to simplify and possibly automate Active Directory management tasks. Since October 2017 Amazon AWS offers integration with Microsoft Active Directory. See also AGDLP (implementing role based access controls using nested groups) Apple Open Directory Flexible single master operation FreeIPA List of LDAP software System Security Services Daemon (SSSD) Univention Corporate Server References External links Microsoft Technet: White paper: Active Directory Architecture (Single technical document that gives an overview about Active Directory.) Microsoft Technet: Detailed description of Active Directory on Windows Server 2003 Microsoft MSDN Library: [MS-ADTS]: Active Directory Technical Specification (part of the Microsoft Open Specification Promise) Active Directory Application Mode (ADAM) Microsoft MSDN: [AD-LDS]: Active Directory Lightweight Directory Services Microsoft TechNet: [AD-LDS]: Active Directory Lightweight Directory Services Microsoft MSDN: Active Directory Schema Microsoft TechNet: Understanding Schema Microsoft TechNet Magazine: Extending the Active Directory Schema Microsoft MSDN: Active Directory Certificate Services Microsoft TechNet: Active Directory Certificate Services Directory services Public key infrastructure Microsoft server technology Windows components Windows 2000