Microsoft AD Spoke Question - Does the Host have to be a Domain Controller?

[cohlandt]

Host Enter the fully qualified domain name of the target host where Microsoft Active Directory is installed. For example, ..com. is specified in the instruction when I do this but not promote to domain controller it does not allow connection.

[Shariq Azim]

Hello I did not understand your question fully. But let me share some example how the OU can be in the format in the case of user creation

"OU=X-Dev,OU=XY,OU=XYZ,DC=ABC,DC=EFG,DC=COM,DC=XXX"\

and without DC in case of group creation (assuming we are creating a global security group) and etc 

[cohlandt]

TO clarify. When connecting the Integration Hub Microsoft AD spoke  in the documentation it states that the host you connect to  must have Microsoft Active Directory is installed.  My understanding is when you install Microsoft Active Directory you must create it in a Microsoft Domain controller ethier add it to an existing domain or create a new domain. See the Microsoft document: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/install-active-directory-domain-services--level-100-

I have a stand alone server I have added the RSAT tools and is connected to the domain but is not a domain controller but the credentials I have is local admin on the server and has delegated rights to add users and computers to groups and can can change user user passwords etc. The Credentials pass the test but the Spoke components all through an error that domain services do not work on the computer.

[alexgg57]

The host in connection could be DC, but in our case - we use just a domain name.

E.g. DC = abcdfg01.domain.com; we use only domain.com plus type = LDAP, and port 636.

Hope it helps.

Alex.

[cohlandt]

OK Do I have to specify a DC in the host field?

WHen I use a domain attached computer non domain controller I receive errors from the spoke. It seems to only work when connecting directly to a DC. SO is DC required is or is there a way to connect to a non DC?