I have run into some issues getting AD integration working. This is what I have done so far:
-Purchased certificate from comodo.
-Setup a server installed SCS 18.104.22.168 and MS SQL.
-Setup a basic profile and configured machines with ACUconfig. Machines show up in the console and are able to be managed. Everything just worked.
-Then I setup a profile with AD integration. Gave the service account access to the OU where the objects will be created per this article(https://communities.intel.com/community/itpeernetwork/vproexpert/blog/2015/03/18/tightening-up-intel-scs-service-account-permissions-for-managing-intel-amt-computer-objects-in-microsoft-active-directory). The service account is a local administrator on the client machine and the service account is an administrator on the server.
When I export the profile (specifying the service account as the account) and run it with ACUConfig I get the following output:
2016-05-24 14:16:04:(INFO) : ACU Configurator , Category: HandleOutPut: Starting log 2016-05-24 14:16:04
2016-05-24 14:16:05:(INFO) : ACU Configurator, Category: : ACUConfig 22.214.171.124
2016-05-24 14:16:05:(INFO) : ACU Configurator, Category: -Unknown Operation-: CJMCHY1.domain.edu.au: Starting to configure AMT...
2016-05-24 14:16:21:(INFO) : localhost, Category: AMT Interface : Wire support:************** 1
2016-05-24 14:16:28:(ERROR) : 4C4C4544-004A-4D10-8043-C3C04F485931, Category: ADInterfaceInternal error: pSdoMachine->GetUserSDO (\\domaincontroller) failed with error 2147943717.
2016-05-24 14:16:29:(INFO) : localhost, Category: AMT Interface : Wire support:************** 1
2016-05-24 14:16:52:(SUCCESS) : ACU Configurator, Category: Exit: ***********Exit with code 0. Details: Success.
The machines do not show up in the SCS console, I can get to the machine through the webui but I cannot login with any account. The AD accounts are created in the OU.
Is there anything I should be checking? Please help