Added the code in plaintext in a text file
Connect to the organization IDP or AD in WinPE (from MDT) and then continue installation.
Hello,
I'm wondering if it's possible to connect to the organizations AD from WinPE or Perhaps with IDP (identity provider) ?
When the user authenticates then the installation will continue, this is to avoid local accounts in the organization.
I have the following code for creation of local account and password, is it possible to modify it?
Sorry for image, but having difficulties to add the code in plain text, I get access denied when I try to post the code.
3 answers
Sort by: Most helpful
-
-
AllenLiu-MSFT 43,951 Reputation points Microsoft Vendor
2022-01-24T08:28:42.473+00:00 Hi, @lupinlicious
Thank you for posting in Microsoft Q&A forum.
You may try to add the PowerShell Active Directory to WinPE to see if it helps:
Here is the details:
https://www.brookspeppin.com/2021/07/10/how-to-add-powershell-active-directory-module-to-winpe-mdt/
(Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.)
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. -
Limitless Technology 39,586 Reputation points
2022-01-28T08:50:38.323+00:00 Hi there,
You can use a WMI on a DC with differed Credentials.
(Get-WmiObject -Namespace 'root\directory\ldap' -Query "Select DS_info from DS_computer where DS_cn = $($AccountName)" -ComputerName $Domain -Credential $myADCred).$($Myattribute)
$AccountName : is the name of the computer that you are searching in AD
$Domain : fqdn name that points to your DC ex:(xyz.youtdomain.com)
$MyADCred : is a credential object containing user and password with the necessary rights on AD $myattribute : is the info that you are searching from the computer in AD.
--If the reply is helpful, please Upvote and Accept it as an answer--