Microsoft Active Directory policy

Create, update, and delete Microsoft Active Directory policies in OneFuse

  3 minute read  

Setup overview

  1. Create a Microsoft Module Credential.
  2. Create a Microsoft Endpoint.
  3. Create a Microsoft Active Directory Policy.
  4. Generate Active Directory computers from Microsoft Active Directory policy executions through the OneFuse API or an Upstream Provider.

Create a Microsoft Active Directory policy

  1. Go to Modules > Microsoft Active Directory.
  2. Find the Microsoft Active Directory Policies datatable and select Create.
  3. Fill out the Microsoft Active Directory Policy form and select Create.
Workspace role Module functions
Admin or Member Create, update, view, and delete Microsoft AD Policies
Viewer View Policies

Update a Microsoft Active Directory policy

Update the Microsoft Active Directory Policy to change the name, description, Endpoint, computer settings, and OU settings.

  1. Access the Microsoft Active Directory Policies dashboard.
  2. Find the Policy to update and select the edit button.
  3. Edit the information on the Microsoft Active Directory Policy form.
  4. Select Update.

Delete a Microsoft Active Directory policy

A Microsoft Active Directory Policy cannot be deleted if it is associated with an existing Computer Name (Managed Object). Remove or unregister any managed objects attached to this policy before deleting.

  1. Access the Microsoft Active Directory Policies dashboard.
  2. Find the Policy and select the delete button.
  3. Select Delete to confirm.

Microsoft Active Directory policy form

Field Description
Microsoft Active Directory Policy Name Enter a name for this Policy.
Description Optional description for this Policy.
Microsoft Endpoint Select the Microsoft Endpoint for this Microsoft Active Directory Policy.
Computer settings
Computer Name Lettercase Select the lettercase for all Computer Names added into Microsoft AD.
Organizational unit (OU)
Use a Build OU? Toggle to enable or disable using a Build OU for the machine during the build process. The parent OU must already exist unless Create OU is enabled.
Interim OU during Build When Use a Build OU is enabled, enter the Build OU using a mix of static and templated text. For example, OU={{teamID | upper}},OU={{origID | lower}},OU={{LOCATION[02]}},DC=net.
Destination OU after Build Enter the destination OU using a mix of static and templated text. For example, OU={{teamID | upper}},OU={{origID | lower}},OU={{LOCATION[02]}},DC=net.
Create OU Toggle to determine whether the OU should be created automatically.
Remove OU Toggle to determine whether the OU should be removed automatically.
Security groups (optional)
Active Directory Security Group Optionally enter the security group the machines will be added to, in Distinguished Name (DN) format.
Advanced
Delete all Computer Accounts with matching Computer Name Toggle to enable. Deletes all Computer Accounts that match the Computer Name being removed.