https://community.intel.com/t5/Intel-Business-Client-Software/Install-Question/m-p/878123#M3202 <P class="MsoNormal" style="MARGIN: 0in 0in 0pt">The schema extension scripts are installed with the AMTConfServer in "Program filesIntelAMTConfServerAdminScriptsActiveDirectory Schema"</P> <P class="MsoNormal" style="MARGIN: 0in 0in 0pt"><P></P></P> <P class="MsoNormal" style="MARGIN: 0in 0in 0pt">You will need to manually run these scripts under a user account that has sufficient privileges to modify the AD schema. <SPAN style="mso-spacerun: yes"></SPAN>These scripts are only neededif your ISV software is configured to use Kerberos authentication for Intel AMT communication.<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"></SPAN>If you are planning on just using TLS with Digest Authentication then the schema modifications are not required.</P> Wed, 07 Mar 2007 22:14:08 GMT Randal_T_Intel 2007-03-07T22:14:08Z https://community.intel.com/t5/Intel-Business-Client-Software/Install-Question/m-p/878122#M3201 <P class="MsoNormal" style="MARGIN: 0in 0in 0pt">The AD Schema extension and user creation is cryptic to say the least in the installation documentation. The installation instructions do not state what user should be installing the package nor what permissions it needs. Also the instructions state on page 12 that an .LDF AD schema extension script is included and it is not in the release.<P></P></P> <P class="MsoNormal" style="MARGIN: 0in 0in 0pt"><P></P></P> <P class="MsoNormal" style="MARGIN: 0in 0in 0pt">As the installer am I to create the user to install SCS<P></P></P> <P class="Default" style="MARGIN: 0in 0in 5pt">The SCS user that the instructions mention to requests a cert before the install (prep) and the one that is the Main Service User for the install. Is this just an AD user with no privileges other that adding the ones stated (<I><SPAN style="FONT-SIZE: 11pt">the SCS user must have permissions to issue certificates (Issue and Manage Certificates and Request Certificates permission) </SPAN></I><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">on page 37.<P></P></SPAN></P> <P class="Default" style="MARGIN: 0in 0in 5pt"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><P></P></SPAN></P> <P class="Default" style="MARGIN: 0in 0in 5pt"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">If the install extends the AD Schema what user should do the install and what privileges does it need.</SPAN></P> Wed, 07 Mar 2007 20:59:27 GMT https://community.intel.com/t5/Intel-Business-Client-Software/Install-Question/m-p/878122#M3201 Vincent_H_Intel 2007-03-07T20:59:27Z https://community.intel.com/t5/Intel-Business-Client-Software/Install-Question/m-p/878123#M3202 <P class="MsoNormal" style="MARGIN: 0in 0in 0pt">The schema extension scripts are installed with the AMTConfServer in "Program filesIntelAMTConfServerAdminScriptsActiveDirectory Schema"</P> <P class="MsoNormal" style="MARGIN: 0in 0in 0pt"><P></P></P> <P class="MsoNormal" style="MARGIN: 0in 0in 0pt">You will need to manually run these scripts under a user account that has sufficient privileges to modify the AD schema. <SPAN style="mso-spacerun: yes"></SPAN>These scripts are only neededif your ISV software is configured to use Kerberos authentication for Intel AMT communication.<SPAN style="mso-spacerun: yes"> </SPAN><SPAN style="mso-spacerun: yes"></SPAN>If you are planning on just using TLS with Digest Authentication then the schema modifications are not required.</P> Wed, 07 Mar 2007 22:14:08 GMT https://community.intel.com/t5/Intel-Business-Client-Software/Install-Question/m-p/878123#M3202 Randal_T_Intel 2007-03-07T22:14:08Z