Shulou(Shulou.com)06/03 Report--

Step 2. Join CM16 to the domain

Note: do the following as a local administrator on the ConfigMgr server (CM16)

To join the domain manually, please log in to CM16. Start Windows File Explorer, right-click This-PC, and select Properties. The system will appear on the screen.

Click change Settings to the right of the computer name. For the option to rename this computer or change its domain or workgroup, click change, click change, for Select members of a domain, enter the domain details used in step 1, and then click OK.

When prompted for credentials, enter credentials and click OK

You will be welcomed by Domain. Click OK.

And prompt to restart the computer, click OK.

On the computer name / domain change screen, click restart now.

Step 3. Create user (optional)

Note: as an administrator, do the following on the Active Directory domain controller server (AD01)

To create users manually, click start, select Windows Administrative tools, and then select Active Directory users and computers.

In Active Directory users and computers, add new users by expanding, select users and right-click, select New, and then select users.

Fill in the new object user details in the wizard that appears

Enter password details using password Pssword

And click Finish (finish)

Repeat the above process to add the remaining users according to your environment

Testuser, test the user

CM_CS, used to build the image created by ConfigMgr

CM_RS for reporting services.

Note: the PowerShell script creates the user and makes the user a local administrator on the CM16 server. To facilitate creation by local administrators, you need (optional) to manually create a GPO on AD01 called allow inbound file and printer sharing exception, which sets the Windows firewall: allow inbound file and printer sharing exception to be enabled.

To create a GPO on AD01, click the start menu, select Windows Management tools, and then select Group Policy Management. Expand the Group Policy object and right-click, select New, and give it a name: allow inbound file and printer sharing exceptions.

In GPO Settings, expand computer configuration, policies, manage templates, and then select Network, Network connections, Windows Firewall, and select Domain profile. Find Windows Firewall: allow inbound file and printer sharing exceptions and set them to enabled.

After you create the GPO, you need to limit it to only the ConfigMgr server (or server). To do this, select the delegation tab of GPO, and then click the Advanced button. Select the Authenticated Users security group, then scroll down to Apply Group Policy permissions and uncheck Allow security settings. This will deny authenticated users this GPO setting

Next, click the add button, select this object Type, make sure you select computer from the object Type, and then select the group or computer object to which you want to apply this policy. Then select the group (such as the ConfigMgr server) and scroll through the permission list until you see the apply Group Policy option, and then check the allow permission, as shown here.

Finally, you need to link GPO, to do this, right-click your domain (djcloud.com in this example) and select Link existing GPO

Then select the newly created GPO

Note: after you have done this, use Gpupdate / force to update the group policy on the CM16 before running the following PowerShell script.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.