This message was deleted.
# citrix-vads
Slackbot
09/15/2022, 8:14 PMThis message was deleted.
r
Ray Davis
09/16/2022, 2:08 AMYea it needs to be able to add computers to AD and manager computer objects ect. They can delegate the same service account they gave permissions for on the VMware hypervisor connection in studio. That account talks to the hypervisor which needs rights from the hypervisor and the AD side for the same account to manager computer objects/create/read/Write to an delagation of an OU.
https://support.citrix.com/article/CTX318084/required-permissions-for-citrix-machine-creation-services-and-auditing-information
n
newbie1998
09/16/2022, 3:23 AMhi ray, someone replied back and said that the host connection account does not need permissions. i don't think it does. i didn't see it in any of the documentation.
r
Ray Davis
09/16/2022, 1:40 PMMaybe I am not understanding your question. The host connection is what contacts the Hypervisor and creates machines. It only needs permissions in what is defined from the hypervisor. Now this is the same account that MCS will use to add the machines to AD once it going through the provisioning process during the machine catalog deployment it will need writes to add the machine to the domain and put them In the OU.
https://support.citrix.com/article/CTX318084/required-permissions-for-citrix-machine-creation-services-and-auditing-information
👍 1
Ray Davis
09/16/2022, 1:46 PMUnless there is a way to have studio define 2 different service accounts? Which I'm not familiar with. When you go though the Hypervisor setup from citrix studio it will ask for a username and password. Which is for the hypervisor connection. It will ask you for MCS/PVS catalog type. Then ask you about the networks / storage ect. When you get past that point and creat a master image for MCS it will ask you about the AD location and it will use the same account. @Eric am I missing something perhaps?
e
Eric
09/16/2022, 2:20 PMHosting Connection, let's say VCSA just need e.g. administrator@vpshere.local + Password. When you create Machine Catalogs, an AD user account with proper permissions needs to be selected to be able to add AD accounts in AD
💯 1
Eric
09/16/2022, 2:20 PMIn case you want to automate it https://github.com/haavarstein/Applications/blob/master/Citrix/XenDesktop/Configure_VCSA_Connection.ps1
r
Ray Davis
09/16/2022, 2:32 PMThanks Eric. Nice script
👍 1