ACS 5.3 integration with Active Directory

[SJ SJ]

I'm able to integrate ACS 5.3 with AD using domain admin user account. But when i try to use a service account with the below mentioned attributes(as per Cisco document) i am unable to integrate ACS with AD

• Add workstations to domain user right in corresponding domain.
• Create Computer Objects or Delete Computer Objects permission on corresponding

computers container where ACS machine's account is created before joining ACS machine to

the domain.

http://www.cisco.com/image/gif/paws/113571/acs5-ad_int_config-00.pdf

Please confirm whether it is mandatory to use a domain admin account for the integration.

Regards,

SJSJ

[Jatin Katyal]

Domain admin rights are not required. The account should have delete and add computer object on the domain. What error do you see when you try to join acs to ad. We might need to fetch adagent logs at the debug level.


Sent from Cisco Technical Support Android App