Back to the main Active Directory section
This guide explains how to grant a service account (
svc_artica_proxyfor example) the minimum required permissions on a computer object (ARTIPROXY) in Active Directory.
These permissions are required to allow linking Artica Proxy to process:
- Update the Kerberos keytab
- Rotate the machine password
- Manage Service Principal Names (SPNs)
ΒΆ ADUC
- Log in to a Domain Controller or management workstation
- Open: Active Directory Users and Computers (
dsa.msc) - In the top menu
View > Advanced Features(required to access the Security tab)
- Locate the Computer Object,
OU=YourOU > ARTIPROXY - Right-click Properties
- Open Security Tab and go to Security, Advanced
- Click: Add
- Select the Service Account svc_artica_proxy
Check the privileges:
Reset password(Permissions section)Read all properties(Permissions section)Write servicePrincipalName( section properties)Write account restrictions( section properties)
