Tag Archives: active directory

vRealize Automation – Active Directory Integration – Configure LDAPS

June 22, 2022VMwareactive directory, AD, Automation, Configure, Integration, LDAPS, vRA, vRealizeDean

In this blog post, I am going to cover the setup of the Active Directory integration with vRealize Automation using LDAPS.

Cloud Assembly supports integration with Active Directory servers to provide out of the box creation of computer accounts in a specified Organizational Unit (OU) within an Active Directory server prior to provisioning a virtual machine.

Note: to join to AD within the Guest OS, you can use CloudConfig properties or vSphere CustomizationSpec.

The VMware official documentation doesn’t really call out LDAPS configuration, only LDAP. So after helping a customer configure this, I thought I’d quickly write something up.

To get started, login into vRealize Automation and select Cloud Assembly.

Select the Infrastructure Tab
Select Integrations under the Connections header
Click the Add Integration button
Select Active Directory

Continue reading vRealize Automation – Active Directory Integration – Configure LDAPS →

Migrating User and Password Objects between Active Directory Forests

March 27, 2020Windowsactive directory, ADMT, MigrationDean

As part of some internal lab work, I had to move the user objects with their passwords to a new forest. It was key to migrate the passwords to ensure that disruption to the users was minimized.

To migrate the users, I used the Microsoft Active Direction Migration Tool (ADMT + documentation) alongside the Password Migration Service.

In this blog post I am going to cover;

Create connectivity between both AD Forests
Installing the ADMT software + Password Migration Service
Creating a user list for migration
Migrating User objects + Passwords between AD Forests

Create connectivity between both AD Forests

There must be IP network connectivity between the DC’s in your Forests.

DNS setup

You need to configure conditional forwarders between your forests, so they can resolve one another.

On the source domain controller;

Open up the DNS console, and right click the Conditional Forwarder folder to create a new record.
Enter your target domain name and IP address/es of your domain controllers in the target domain. Select “store this conditional forwarder in active directory”, to replicate to other DCs in the source domain.

Continue reading Migrating User and Password Objects between Active Directory Forests →