• State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 63 subscribers
  • Views 6268 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

gMSA provisioning: edsvaPrincipalsAllowedToRetrieveManagedPassword not returning computer objects in Web-UI

jochen
over 7 years ago

Hi guys,

I'm trying to configure a gMSA provisioning workflow in ARS 6.9 and came across some strange behavior. When you try to specify the computers and groups the gMSA will be used on (edsvaPrincipalsAllowedToRetrieveManagedPassword), the web interface search will only return users/groups but no computers. When you use the MMC to configure that attribute, it will work properly and also show computer objects.

So in this case, if you don't want to use the console, you would always have to specify a group and could not just add one single computer.

Is this a bug in the Web UI or am I missing something here?

Big thanks in advance,
Jochen

Parents
  • 0 over 7 years ago
    Sounds like there could be an issue with the query behind the web UI page. No harm in opening a Support ticket to be sure about that.

    You mention "workflow" - did you mean this in the generic sense of "process" or an actual ActiveRoles workflow? Only reason I ask is because even if there is a GUI limitation in the Web UI, using an AR workflow behind the scenes, you could probably get around it.
Reply
  • 0 over 7 years ago
    Sounds like there could be an issue with the query behind the web UI page. No harm in opening a Support ticket to be sure about that.

    You mention "workflow" - did you mean this in the generic sense of "process" or an actual ActiveRoles workflow? Only reason I ask is because even if there is a GUI limitation in the Web UI, using an AR workflow behind the scenes, you could probably get around it.
Children
No Data