Requesting Delegation for Windows Clusters

Prerequisites

A name for the cluster has been defined
- ex. DEPT-Cluster1

Prepare Active Directory objects

The steps in this section can be completed by a department administrator or a user with permissions to create OUs and computer objects in a department OU.

Create a new OU in Active Directory to contain the objects for the cluster.
- This is the cluster OU.
Create the computer objects for the cluster members in the cluster OU.
- These are the cluster member objects.
Create a disabled computer object with the name of the cluster in the cluster OU.
- This is the cluster computer object.
Create a group and add the cluster computer object and cluster member objects to the group.
- This is the cluster computers group.

Request Active Directory delegation

The required delegation can be created in one of two ways:

Browse to the following page:
- Austin Active Directory in ServiceNow
Select Request in the Active Directory Delegation section.
Complete the form by setting the following values:
- Set the AD Group Name to delegation permissions to field to the name of the cluster computers group created in the previous section
- Select the Computer delegation in the Delegation Options section
- Set the OUs to apply the delegations to field to the canonical or distinguished name of the cluster OU created in the previous section
Submit the form by selecting Request on the right-hand side of the form.
Wait for the Active Directory team to process the requested delegation.

Browse to following page:
- Requests By Attribute
Complete the appropriate sections in the Submit Requests and Review Results section.