Issue provisioning machines with AD integration

[rjard]

Hi All,

I have run into some issues getting AD integration working. This is what I have done so far:

-Purchased certificate from comodo.

-Setup a server installed SCS 11.0.0.214 and MS SQL.

-Setup a basic profile and configured machines with ACUconfig. Machines show up in the console and are able to be managed. Everything just worked.

-Then I setup a profile with AD integration. Gave the service account access to the OU where the objects will be created per this article(/community/itpeernetwork/vproexpert/blog/2015/03/18/tightening-up-intel-scs-service-account-permissions-for-managing-intel-amt-computer-objects-in-microsoft-active-directory https://communities.intel.com/community/itpeernetwork/vproexpert/blog/2015/03/18/tightening-up-intel-scs-service-account-permissions-for-managing-intel-amt-computer-objects-in-microsoft-active-directory). The service account is a local administrator on the client machine and the service account is an administrator on the server.

When I export the profile (specifying the service account as the account) and run it with ACUConfig I get the following output:

2016-05-24 14:16:04:(INFO) : ACU Configurator , Category: HandleOutPut: Starting log 2016-05-24 14:16:04

2016-05-24 14:16:05:(INFO) : ACU Configurator, Category: : ACUConfig 11.0.0.214

2016-05-24 14:16:05:(INFO) : ACU Configurator, Category: -Unknown Operation-: CJMCHY1.domain.edu.au: Starting to configure AMT...

2016-05-24 14:16:21:(INFO) : localhost, Category: AMT Interface : Wire support:************** 1

2016-05-24 14:16:28:(ERROR) : 4C4C4544-004A-4D10-8043-C3C04F485931, Category: ADInterfaceInternal error: pSdoMachine->GetUserSDO (\\domaincontroller) failed with error 2147943717.

2016-05-24 14:16:29:(INFO) : localhost, Category: AMT Interface : Wire support:************** 1

2016-05-24 14:16:52:(SUCCESS) : ACU Configurator, Category: Exit: ***********Exit with code 0. Details: Success.

The machines do not show up in the SCS console, I can get to the machine through the webui but I cannot login with any account. The AD accounts are created in the OU.

Is there anything I should be checking? Please help

-Ross