This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
This is probably a stupid question, but I am an ACS noob, so forgive me.
I am deploying ACS 5.1 to a AD network and had a question regarding the join process to AD. The User Guide states to use a "predefined user in AD with permission to add machines to the AD domain".
Can the machine account for ACS be predefined in AD and then connect using any valid creds, or is the condition specified the only way ACS will join the AD domain?
Thanks for any help you can provide.
I never tried what you are trying to accomplish but as I know machine account can't list other users and attributes from AD. ACS need to have account defined in its gui which is used to list/check/verify groups and so on.
You need to create username and pwd for ACS in AD. ACS will use that account to query AD for groups, users, etc. The account needs permissions to add machines because it will join the acs server to your domain.
Yes you can pre-create the machine account, and that appears to
be the only write access the ACS needs. I went round and round with TAC re this, they saying
it was only supported if the ACS had a Domain Admin account, but it's not neccessary, once the ACS is in the domain, it only reads.