Dear collegues,
I'm currently setting up a Proof of Concept VDI lab, and stuck on a delicate moment. Googling didn't help.
I work for a large company with many local offices. In our AD structure, each of local offices has its computers and users in a specific OU. One of these users (OU Admin) has rights to create/modify/delete accounts within his own OU, and has read rights for the rest of AD.
While setting desktop virtualization, I've stuck being unable to set an account (OU Admin) to create/modify virtual desktops' computer accounts in AD.
Default config doesn't work for apparent reasons.
I tried this way:
Server Manager => Remote Desktop Services => Collections => Create Collection
Step "Unattended Settings"
Checked "Specify the distinguised name of the organization unit" and gave a name
Error text:
The RD Connection Broker server does not have access to add the virtual desktops to the Active Directory domain. Configure access by using the Active Directory page of Deployment Properties.
Going to Server Manager => Remote Desktop Services => Overview
Window "Deployment overview", Tasks => Edit deployment properties
Navigating to Active Directory
Still, there is no option to configure AD access account.
Any help would be most appreciable.
Thank you.