Intel Communities: Message List - Intel AMT Active Directory Objects

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Tue, 16 Aug 2011 15:04:53 GMT

Hi David, I am using sccm 2007 with a verisign cert for auto provisioning.

What do you mean by Ad intergration?

thanks

Stéphane

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Tue, 16 Aug 2011 14:14:34 GMT

Dan, the problem is when the amt object get created in AD the account's password is set not to HAVE to expire. So because of this our policy to change the password does not take effect.

can we change this?

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Sun, 14 Aug 2011 10:12:31 GMT

Hi Stephane,

Before I can respond to your question, I need to know which version of SCS you are using and what is the AD Integration setting you are using?

David

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Thu, 04 Aug 2011 22:02:58 GMT

Ah, Ok. You are in good shape then. SCCM takes care of the maintenance of the AD objects for AMT and will make sure that passwords get changed automatically in accordance with any policies you have in place in the AD.

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Thu, 04 Aug 2011 12:28:31 GMT

Hi Dan, i am in band provisioning these clients through sccm 2007 r2

auto provisioning is set through sccm with a 3rd party cert.

if there is any other info you need let me know

thanks

Stéphane

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Wed, 03 Aug 2011 17:37:04 GMT

Building on what Adolfo said, the maintenance tasks to reset the AD object password depend on what software you are using. Can you give me some more background on your implementation? Are you provisioning with the Intel SCS? If so, which version?

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Wed, 03 Aug 2011 18:14:32 GMT

Adolfo, i am talking about the amt active directory object password.

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Wed, 03 Aug 2011 18:16:41 GMT

ok thanks Steve i will wait on a reply from them.

I got one from Adolfo saying the amt password cannot be reset every 30 days but i don't beleive he is talking about the amt active directory object.

let me know

thanks.

Stéphane

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Wed, 03 Aug 2011 16:55:40 GMT

Currently there is no way to do that, the only way to reset the AMT password is manually.

Youcannot set the system to remind you every 30 days or so.

Re: Intel AMT Active Directory Objects

webadmin@intel.com — Wed, 03 Aug 2011 17:05:49 GMT

Sorry about the delay on your security question. I've entered an internal support request to our Intel AMT team get some help on this issue. You should be getting a reply in a few days.