Working with Active Directory

In this recipe, we will look at how Orchestrator uses the Active Directory plugin.

Getting ready

We need an AD server for this recipe as well as access to the AD server OS itself.

How to do it...

We split this recipe into multiple parts.

Preparing AD for SSL

You can add AD to Orchestrator without using SSL; however, you will not be able to create users, change passwords, or use any other more secure options. If you decide not to use SSL, skip this step.

First, we will install Active Directory Certificate Services.

Note

Microsoft does not recommend that you run a CA server on a domain controller; however, for a lab, it is totally okay.

To activate SSL for AD, follow these steps:

1. Log in to the Windows server that will host the CA. In my case, this is my domain controller: ADDNS.mylab.local with domain administrator rights.

2. Add the Active Directory Certificate Services server role.

3. Just click on Next and accept all the default settings. In the following screenshot, you'll find...