-
Notifications
You must be signed in to change notification settings - Fork 19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DFSNamespaceRoot: Configure Delegation #104
Comments
Hi @randomnote1 - this seems like a good feature to add. This feature is non-trivial however, because the If the above problem could be solved then we could add the following parameters:
|
If anyone's trying to do this, it should be possible to do this using the ActiveDirectoryDsc module's ADObjectPermissionEntry resource https://github.com/dsccommunity/ActiveDirectoryDsc/wiki/ADObjectPermissionEntry To modify Delegate Management Permissions for all DFS Namespaces, you need to set permissions on CN=DFS-Configuration,CN=System=DC=domain,DC=goes,DC=here On a single namespace: CN=NamespaceName,CN=DFS-Configuration,CN=System=DC=domain,DC=goes,DC=here For all DFS Replication Groups: CN=DFSR-GlobalSettings,CN=System=DC=domain,DC=goes,DC=here For a single replication group: CN=ReplicationGroupName,CN=DFSR-GlobalSettings,CN=System=DC=domain,DC=goes,DC=here I hope this helps anyone else who wants to achieve this! https://mskb.pkisolutions.com/kb/258992 https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/delegating-dfs-replication |
For example, the following ActiveDirectoryDsc configuration will replicate the 'Delegate Management Permissions...' options within the DFS Management Console for both the Namespaces and Replication nodes:
https://regularsysadmin.wordpress.com/2015/02/01/delegating-dfs-to-non-domain-admins/ |
Details of the scenario you tried and the problem that is occurring
I need to be able to configure the users in the
Delegation
tab. I think this is the most appropriate resource for this feature to be added.Suggested solution to the issue
Use the
Set-DfsnRoot
cmdlet with the-GrantAdminAccounts
parameter.Delegate management permissions for DFS Namespaces
Version of the DSC module that was used ('dev' if using current dev branch)
4.4.0.0
The text was updated successfully, but these errors were encountered: