Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

[AndrewChan]

after successfully provision the desktop computer in Intel EMA, the next target is to management laptops that have WiFi only.

So when the laptops are in office, they connect to the Corporation WiFi which uses 802.1x authentication through certificate.

I've created 802.1x profile, entering a dedicated AD OU to create objects to consume the certificate, then I created a new AMT profile that uses it.

After installing the agent along with the new configuration file. it stays on Intel® AMT setup status: Pending Configuration

While looking into the log files

The manageability server log had an error

"Add computer to organization unit in Active Directory failed. Error = Access is denied."

The question is, how do I control which account is used when putting objects into the OU (which configured on the 802.1x profiles)

Thanks

[Arun_Intel1]

Hi AndrewChan,

Greetings!

Before we proceed, please share the environmental details asked below, for us to analyze and share our findings:

EMA Version

AMT Version

Number of Endpoints

BIOS version

OS on the server and on the Endpoints

ACM or CCM mode

Endpoint model

And please specify the Error that you are getting in the Manageability server logs

Best Regards

Arun_Intel

[AndrewChan]

EMA 1.13.1.0

AMT 15.x

Number of Endpoints :1 (in its respective Endpoint Group)

BIOS Version (Lenovo X1 Carbon Yoga Gen 6 BIOS 1.69)

OS server running on WIndows 10 22H2 (it's a PoC)

ACM

Endpoint (Lenovo X1 Carbon Yoga Gen 6 )

Logs attached.

The specified error was "Add computer to organization unit in Active Directory failed. Error = Access is denied." which I think it is caused by the credential being used had insufficient permission, and thus my question :  How may I manage the credential being used to create objects in AD OUs?

[Arun_Intel1]

Hi AndrewChan,

Greetings!

This is the first follow up, please share the environmental details asked.

Best Regards

Arun_Intel

[vij1]

Hello AndrewChan,

Greetings!

Please note that Intel® Endpoint Management Assistant (EMA) must be installed on either Windows Server 2019 or Windows Server 2022. These are the only supported operating systems for the installation of EMA.

If you have any questions or need further assistance, feel free to reach out.

Best regards,

Vijay N.

[AndrewChan]

Hello,

I've spend the last few days installing the EMA on a Windows Server now and still giving out same error, basically cannot create objects in AD. So:

What credential was used to access the AD? and 
how may I modify this credential?

Thanks

Andrew

[Arun_Intel1]

Hi Andrewchan,

Greetings!

We see that you have got the same error even after installing the Windows server OS, kindly confirm which version of the server OS has been in installed (windows server 2022 or 2019)

And please share the error screen shot that you are getting and the latest Swarm and the Manageability logs as well for us to further analyze.

Best Regards

Arun_Intel

[vij1]

Hello Andrewchan,

Greetings for the day!

We are following up to find out if you were able to find the information we provided. Please reply to confirm, so we can continue helping on a resolution. Looking forward to receiving your reply.

Regards,

Vijay N

[AndrewChan · Accepted solution]

I've added the server account to the OU's security and allowed it to create objects, now the "Add computer to organization unit in Active Directory failed. Error = Access is denied" error gone.

Thanks.

[Arun_Intel1]

Hello AndrewChan,

Greetings!

We are glad to hear that the issue has been resolved.

Please feel free to contact us for any further assistance, we are more than happy to assist you.

Best Regards,

Arun_Intel