This dialog box allows you to create a new authorization policy store.

The following table describes the UI elements for this dialog box.

Item Description

Select the authorization store type

Active Directory

Specifies that the new authorization store is in Active Directory Domain Services (AD DS). This type of authorization store is specified with a Lightweigt Directory Access Protocol (LDAP) distinguished name such as CN=myStore,CN=Program Data,DN=nwtraders,DN=com. You can also use a URL beginning with MSLDAP:// or MSXML://.

XML file

Specifies that the new authorization store is an XML file.


XML stores do not support delegation.

Microsoft SQL

Specifies that the store is in a Microsoft SQL Server database. SQL Server database stores are specified with a URL beginning with the protocol prefix MSSQL:// followed by a connection string, database name, and policy store name in the format:

MSSQL://<connection string>/<database name>/<policy store name>

Authorization store schema

Selects between a version 1.0 schema and a version 2.0 schema. If you have client applications that have been written for version 1, you should select Schema version 1.0. For more information about schema differences, see What's New in Authorization Manager.

Store Name

Provides a space for you to type the store name.

  • If the store is an XML file, the current working directory is displayed (for example, C:\My Documents) and you can type the rest of the path and file name. If you do not type the .xml extension, it is appended when saved.

  • If the store is in AD DS, type the LDAP distinguished name (for example, CN=myStore,CN=Program Data,OU=sales,DC=northwindtraders,DC=com). The distinguished name must be valid in AD DS. You can also use a URL beginning with MSLDAP:// or MSXML://.

  • If the store is in an SQL Server database, type the URL used to access the database, in the format:

    mssql://<connection string>/<database name>/<policy store name>


Click to browse to an authorization store location.

Additional references