List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] MSAs in Perimeter

Prev Next

You are not authorized to post a reply.

Author

Messages

rmscheck

Posts:245

07/14/2010 4:01 AM
Hi all.. can 2008 R2 rodcs in a perimeter netowork design support the use of managed svc accts? -Rand

chriss3

Posts:19

07/14/2010 5:12 AM
Hi Rand! This is currently an issue with Win7 and Windows Server 2008 R2 RTM cause calling NetAddServiceAccount (The API behind) will try to create a link between the MSA and the computer account (that operation will against an RODC) However there is a resolution to this issue in Win7 SP1 and Windows Server 2008 R2 SP1, where we can pass in a new flag: SERVICE_ACCOUNT_FLAG_ADD_AGAINST_RODC where the MSA only will be locally installed with the LSA. So you will have to wait for SP1 for running this setup. /C Enfo Zipper Christoffer Andersson - Principal Advisor Microsoft MVP - Directory Services -----Original Message----- From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Rand Salazar Sent: den 14 juli 2010 05:00 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] MSAs in Perimeter Hi all.. can 2008 R2 rodcs in a perimeter netowork design support the use of managed svc accts? -Rand

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] MSAs in Perimeter

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads