Previous Topic: Define and Distribute ConfigurationNext Topic: Configure Microsoft ADS


Establish Boot Server - ADS Communication

The following parameters must be set to allow the boot server to communicate with ADS:

ADSUse

Must be set to 1, or true.

ADSProvider

The IP address or host name of the machine that contains the MicrosoftADS namespace.

ADSUserId

The ID of the user, who must be a member of the Administrators group on the ADS Controller and must have been granted full permissions to the \\ADSProvider\ROOT\MicrosftADS namespace.

If the user is not the “Administrator,” then a new user's access rights can be set by following these procedures:

  1. First create a new user from Computer Management, and then configure WMI by going to the WMI Control Properties dialog as shown in the following screenshot:

    Screenshot showing how to view the WMI Control Properties dialog in the Computer Management window

  2. Select the MicrosoftADS namespace and click the Security tab.

    Thw WMI Control Properties dialog appears as shown in the following screenshot:

    Screenshot showing the WMI Control Properties dialog with MicrosoftADS selected

  3. Then add the following rights for the new user as shown in the following screenshot, and click OK:

    Screenshot showing the following rights selected for the new user: Execute Methods, Full Write, Partial Write, Provider Write, Enable Account, and Remote Enable

ADSPassword

The password to log in to the ADS controller for the given ID.

ADSDomain

The domain to use to authenticate the user when connecting to the controller. This can be left blank if the user to be authenticated has been defined on the ADS controller.

ADSAuthenticationType

The type of authentication to use when connecting to the ADS controller. This value can be set to either ntlmdomain or Kerberos