Post by levi on Feb 22, 2019 16:32:46 GMT
I have a scenario were techs are manually precreating AD accounts. InfoSec requires they are the Creator/Owner of the accounts. And they do not want to grant the service account permissions to delete all workstation accounts.
It goes against the awesome-ness of UI++ to require the techs to do a manual step before imaging and then having to make sure they get the computer name the same.
Would it be possible to add a feature to pre-stage the AD account? Something like:
<action “createcomputer” name=”%OSDComputerName%” ou=”%OSDJoinDomainOU%” creds=”UserAuth”/>
Creds would have option of:
-UserAuth | Uses cached credentials from user auth prompt
-OSDJoin | Uses variables OSDJoinAccount, OSDJoinPassword
-NAA | Uses variables _SMSTSReserved00/01.
This would need to have a screen indicating it is joining the domain, showing a success/failure. Give the option to automatically advance screen if successful.
It goes against the awesome-ness of UI++ to require the techs to do a manual step before imaging and then having to make sure they get the computer name the same.
Would it be possible to add a feature to pre-stage the AD account? Something like:
<action “createcomputer” name=”%OSDComputerName%” ou=”%OSDJoinDomainOU%” creds=”UserAuth”/>
Creds would have option of:
-UserAuth | Uses cached credentials from user auth prompt
-OSDJoin | Uses variables OSDJoinAccount, OSDJoinPassword
-NAA | Uses variables _SMSTSReserved00/01.
This would need to have a screen indicating it is joining the domain, showing a success/failure. Give the option to automatically advance screen if successful.
