'SP2' 태그의 글 목록

Microsoft Identity Manager 2016 SP2. Synchronization Server 구성

2021. 2. 28. 14:53

아래의 기술자료를 참고하여 진행하였습니다.
Microsoft Identity Manager 2016에 대한 도메인 설정 | Microsoft Docs
Microsoft Identity Manager 동기화 서비스 설치 | Microsoft Docs

AD Join

아래의 명령어로 필요한 서비스 계정들을 생성합니다. - UI 상에서 진행해도 상관 없습니다.

#DC에서 아래의 명령어들을 진행합니다.
#Password 지정
$sp = ConvertTo-SecureString "Pass@word1" –asplaintext –force

#MIM Sync Account
New-ADUser –SamAccountName MIMSync –name MIMINSTALL -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
Set-ADAccountPassword –identity MIMSync –NewPassword $sp
Set-ADUser –identity MIMSync –Enabled 1 –PasswordNeverExpires 1

#Add Service Account Group
New-ADGroup –name MIMSyncAdmins –GroupCategory Security –GroupScope Global –SamAccountName MIMSyncAdmins -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
New-ADGroup –name MIMSyncOperators –GroupCategory Security –GroupScope Global –SamAccountName MIMSyncOperators -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
New-ADGroup –name MIMSyncJoiners –GroupCategory Security –GroupScope Global –SamAccountName MIMSyncJoiners -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
New-ADGroup –name MIMSyncBrowse –GroupCategory Security –GroupScope Global –SamAccountName MIMSyncBrowse -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
New-ADGroup –name MIMSyncPasswordSet –GroupCategory Security –GroupScope Global –SamAccountName MIMSyncPasswordReset -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"

#MIM Install Account
New-ADUser –SamAccountName MIMINSTALL –name MIMINSTALL -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
Set-ADAccountPassword –identity MIMINSTALL –NewPassword $sp
Set-ADUser –identity MIMINSTALL –Enabled 1 –PasswordNeverExpires 1

#MIM Service Account
New-ADUser –SamAccountName MIMService –name MIMService -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
Set-ADAccountPassword –identity MIMService –NewPassword $sp
Set-ADUser –identity MIMService –Enabled 1 –PasswordNeverExpires 1

New-ADUser –SamAccountName MIMSSPR –name MIMSSPR -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
Set-ADAccountPassword –identity MIMSSPR –NewPassword $sp
Set-ADUser –identity MIMSSPR –Enabled 1 –PasswordNeverExpires 

New-ADUser –SamAccountName MIMAdmin –name MIMAdmin  -Path "OU=MIMSVC,DC=Fabrikam,DC=kr"
Set-ADAccountPassword –identity MIMAdmin –NewPassword $sp
Set-ADUser –identity MIMAdmin –Enabled 1 –PasswordNeverExpires 1

#Add MIMSyncAdmins Account
Add-ADGroupMember -identity MIMSyncAdmins -Members Administrator
Add-ADGroupmember -identity MIMSyncAdmins -Members MIMService
Add-ADGroupmember -identity MIMSyncAdmins -Members MIMInstall

일부 명령어는 수정하여 아래 캡쳐내용에 없는 부분도 있습니다.