Control Compliance Suite (CCS) stores information about preferences and roles as well as some business objects and other information in the Control Compliance Suite Directory. For other business objects or other information, the object is stored in the production database or the reporting database and the object security descriptor is stored in the Control Compliance Suite Directory. The Control Compliance Suite Directory stores information in a structured way. You can extend the default directory schema to store additional information.

The Application Server can retrieve information from the Control Compliance Suite Directory. For extended permissions, the Application Server also contacts the Directory Support Service. Like the directory, the Directory Support Service runs on the Directory Server. The Directory Support Service is installed automatically when you install the Directory Server. The Directory Support Service has minimal configuration needs.

On Windows Server 2003, the Directory Server is hosted by the Microsoft Active Directory Application Mode (ADAM) service. ADAM runs as an independent user service, as opposed to an operating system service. ADAM is designed to meet the specific needs of organizations that use directory-enabled applications. ADAM is a Directory Service subset of the Microsoft Active Directory. ADAM does not replace any existing directory service on your network. This ADAM installation is for the sole use of the Control Compliance Suite.

On Windows Server 2008, the Directory Server is hosted by the Microsoft Active Directory Lightweight Directory Service (AD LDS). Like ADAM, AD LDS runs as an independent user service, as opposed to an operating system service. AD LDS is a Directory Service subset of the Microsoft Active Directory. AD LDS does not replace any existing directory service on your network. This AD LDS installation is for the sole use of the Control Compliance Suite.

The directory is installed and created automatically when you install the Directory Server.

The account you use for the Directory Support Service must be a local administrator-equivalent account on the computer that hosts the service. The account can be an Active Directory domain account or a local Windows user account.