[gpfsug-discuss] [EXTERNAL] Spectrum Scale CES adds only Domain Admin to local Administrators group

[Wood, Justin Gregory]

I recently went through the process of installing some protocol nodes and our organization also has a separate AD/Windows group. All I had to do was to get the AD admins to add a “stub” computer object, then they made me an administrator of that object. That allowed me to run mmuserauth to do the setup. It was fairly simple and allowed me to do lots of work/testing without interaction with the AD group.

-Justin.


From: <gpfsug-discuss-bounces at spectrumscale.org> on behalf of "Engeli Willi (ID SD)" <willi.engeli at id.ethz.ch>
Reply-To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: Thursday, March 30, 2017 at 7:29 AM
To: "gpfsug-discuss at spectrumscale.org" <gpfsug-discuss at spectrumscale.org>
Subject: [EXTERNAL] [gpfsug-discuss] Spectrum Scale CES adds only Domain Admin to local Administrators group

Hi everybody,
In our organization, the management of AD is strictly separated from management of storage. Since we install spectrum scale with protocol SMB and NFS support, we need to join the systems to AD, and have at least the joining user added as well to the local administrators group.

Any idea of how to achieve this? Asking our Domain Admin is not the correct method to add other groups, this needs to be in our hands.

Regards Willi

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20170330/2fda0610/attachment.htm>