09-01-2010 02:29 PM - edited 03-10-2019 05:22 PM
This is probably a stupid question, but I am an ACS noob, so forgive me.
I am deploying ACS 5.1 to a AD network and had a question regarding the join process to AD. The User Guide states to use a "predefined user in AD with permission to add machines to the AD domain".
Can the machine account for ACS be predefined in AD and then connect using any valid creds, or is the condition specified the only way ACS will join the AD domain?
Thanks for any help you can provide.
09-02-2010 12:50 AM
hi,
I never tried what you are trying to accomplish but as I know machine account can't list other users and attributes from AD. ACS need to have account defined in its gui which is used to list/check/verify groups and so on.
regards
09-03-2010 04:42 AM
You need to create username and pwd for ACS in AD. ACS will use that account to query AD for groups, users, etc. The account needs permissions to add machines because it will join the acs server to your domain.
09-03-2010 11:52 AM
Yes you can pre-create the machine account, and that appears to
be the only write access the ACS needs. I went round and round with TAC re this, they saying
it was only supported if the ACS had a Domain Admin account, but it's not neccessary, once the ACS is in the domain, it only reads.
09-03-2010 11:56 AM
That is correct there is no need for it to be a domain admin account. Our ACS account is only a domain user
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide