Group Administration Guide - LDAP Authentication Service
Currently groups for the services.fnal.gov LDAP service are managed using a restricted MMC (Microsoft Management Console) application on ldapmaint1. If you are an application administrator and have been granted access to manage the group(s) for your application, please use an RDP client and connect to ldapmaint1.fnal.gov and log in with your services user name and password. After logging in you should see a screen like this:
Double click on the FermiGroups icon to start the application. A list of groups will appear.
Select the group that you want to modify. At this point you can either select the properties option that will appear or right click on the group object and select Properties.
Select the Members tab of the Properties windows. Add/remove users as necessary. Click on the OK button when you are finished.
After you are done modifying groups, please log out of the server.