Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Prerequisites

  • A name for the cluster has been defined

    • ex. DEPT-Cluster1

Prepare Active Directory objects

Info

The steps in this section can be completed by a department administrator or a user with permissions to create OUs and computer objects in a department OU.

  1. Create a new OU in Active Directory to contain the objects for the cluster.

    • This is the cluster OU.

  2. Create the computer objects for the cluster members in the cluster OU.

    • These are the cluster member objects.

  3. Create a disabled computer object with the name of the cluster in the cluster OU.

    • This is the cluster computer object.

  4. Create a group and add the cluster computer object and cluster member objects to the group.

    • This is the cluster computers group.

...

  • This is the cluster administrators group.

...

Request Active Directory delegation

Info

The steps in this section must be completed by a department owner.

...

Request Active Directory delegation

The required delegation can be created in one of two ways:

Expand
titleThe Active Directory Delegation Request form in ServiceNow
  1. Browse to the following page:

  2. Select Request in the Active Directory Delegation section.

  3. Complete the form by setting the following values:

    • Set the AD Group Name to delegation permissions to

...

    • field to the name of the cluster computers group

...

    • created in the previous section

    • Select the Computer delegation in the Delegation Options section

    • Set the OUs to apply the delegations to field to

...

    • the canonical or distinguished name of the cluster OU created in

...

  • AD Group Name to delegation permissions to: provide the name of the the cluster administrators group
  • Delegation(s) to Apply: select the Computer delegation
  • OUs to apply the delegations to: provide the distinguished name of the OU created in step 2

...

    • the previous section

  1. Submit the form by selecting Request on the right-hand side of the form.

  2. Wait for the Active Directory team to process the requested delegation.

Expand
titleThe Requests By Attribute process
  1. Browse to following page:

  2. Complete the appropriate sections in the Submit Requests and Review Results section.