Azure 活动目录 + 活动目录

Question

你们能帮我一个问题吗？

我在 Azure 和 Windows Server 2019 (Active Directory) 虚拟机上创建了一个 ADDS，该虚拟机托管在 Azure 上。

我在更改属性和使用登录时间选项时遇到问题 trought 用户的帐户...“您无权更改登录时间属性，您的更改将不会被保存”。

在 Windows Server 2019，我拥有企业管理员权限。 在 Azure，我有管理员许可，但仍然有这些问题。

有人可以给我一个线索来解决这个问题吗？

谢谢。

Answer 1

• In Azure ADDS, you will have to add your signing in ID to the Windows Server VM, ie, the Azure ADDS DC to the Azure AD DC Administrators group in your Azure AD tenant. 一旦您在此组中添加了您的用户 ID，您将能够在加入 Windows 服务器 VM 的托管域中配置“登录时间”属性。

• 此外， though you are the administrator, but it is not clear what permissions you are assigned. As a result, you need to be assigned the 'Domain Services Contributor' Azure role for creating the required Azure ADDS resources along with 'Application Administrator' and 'Groups Administrator' Azure AD roles in your tenant though you are the administrator, but it is not clear what permissions you are assigned. As a result, you need to be assigned the 'Domain Services Contributor' Azure role for creating the required Azure ADDS resources along with 'Application Administrator' and 'Groups Administrator' Azure AD roles in your tenant 。

因此，如果您确保完成上述更改，您肯定能够更改“登录时间”属性。 请找到以下快照供您参考：-

要了解更多信息，请点击以下链接：-

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-management-vm#administrative-tasks-you-can-perform-on-a-managed-domain

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance-advanced#prerequisites