Azure 活动目录 + 活动目录
[英]Azure Active Directory + Active Directory
问题描述
can you guys help me with a question?
你们能帮我一个问题吗？
I have an ADDS created on Azure and a Windows Server 2019 (Active Directory) virtual machine hosted at Azure either.我在 Azure 和 Windows Server 2019 (Active Directory) 虚拟机上创建了一个 ADDS，该虚拟机托管在 Azure 上。
I'm having problems to change the attributes and using the logon hours options trought the user's account... "You do not have permission to change the logon hours attribute, your changes won't be saved".我在更改属性和使用登录时间选项时遇到问题 trought 用户的帐户...“您无权更改登录时间属性，您的更改将不会被保存”。
At Windows Server 2019, i have the enterprise admin permission.在 Windows Server 2019，我拥有企业管理员权限。 At Azure, i have the administrator permition and still having theses issues.在 Azure，我有管理员许可，但仍然有这些问题。
Can someone give me a clue to solve this?有人可以给我一个线索来解决这个问题吗？
Thanks.谢谢。
1 个解决方案
解决方案1
0 2022-09-12 07:27:14
• In Azure ADDS, you will have to add your signing in ID to the Windows Server VM, ie, the Azure ADDS DC to the Azure AD DC Administrators group in your Azure AD tenant. • In Azure ADDS, you will have to add your signing in ID to the Windows Server VM, ie, the Azure ADDS DC to the Azure AD DC Administrators group in your Azure AD tenant. Once, you have added your user ID in this group, you will be able to configure the 'logon hours' attribute in the managed domain joined Windows Server VM .一旦您在此组中添加了您的用户 ID，您将能够在加入 Windows 服务器 VM 的托管域中配置“登录时间”属性。
• Also, though you are the administrator, but it is not clear what permissions you are assigned. As a result, you need to be assigned the 'Domain Services Contributor' Azure role for creating the required Azure ADDS resources along with 'Application Administrator' and 'Groups Administrator' Azure AD roles in your tenant • 此外， though you are the administrator, but it is not clear what permissions you are assigned. As a result, you need to be assigned the 'Domain Services Contributor' Azure role for creating the required Azure ADDS resources along with 'Application Administrator' and 'Groups Administrator' Azure AD roles in your tenant though you are the administrator, but it is not clear what permissions you are assigned. As a result, you need to be assigned the 'Domain Services Contributor' Azure role for creating the required Azure ADDS resources along with 'Application Administrator' and 'Groups Administrator' Azure AD roles in your tenant . though you are the administrator, but it is not clear what permissions you are assigned. As a result, you need to be assigned the 'Domain Services Contributor' Azure role for creating the required Azure ADDS resources along with 'Application Administrator' and 'Groups Administrator' Azure AD roles in your tenant 。
Thus, if you ensure that the above changes are done, you will surely be able to change the 'logon hours' attribute .因此，如果您确保完成上述更改，您肯定能够更改“登录时间”属性。 Please find the below snapshot for your reference: -请找到以下快照供您参考：-
To know more about this, kindly follow the below links: -要了解更多信息，请点击以下链接：-
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-management-vm#administrative-tasks-you-can-perform-on-a-managed-domain https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-management-vm#administrative-tasks-you-can-perform-on-a-managed-domain
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance-advanced#prerequisites https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance-advanced#prerequisites
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.