Issues when initializing AWS Directory Service

0

Hi, I am new to using AWS Directory Service.

I followed this lab https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_tutorial_test_lab_base.html

Next, I attached an EC2 instance using Domain Join.

My security group settings are as follows: Inbound: 3389 (My IP); All traffic (10.0.0.0/16) Outbound: All traffic (Everywhere)

I've added the AmazonSSMManagedInstanceCore and the AmazonSSMDirectoryServiceAccess to my instance profile as well.

However, I am still unable to login under corp\Admin with the password created when initializing the Directory. Also, I am able to login as Administrator under the local account.

Is there anything I done wrong? My directory is AD Standard based on Windows Server 2019.

My end goal is to attach an FSx so that I can do create Lambdas to transfer files over SMB.

IaC: https://github.com/andreswebs/terraform-aws-ad-fsx Lambda SMB: https://aws.amazon.com/blogs/storage/enabling-smb-access-for-serverless-workloads/

Alex
질문됨 3달 전218회 조회
1개 답변
0

Hello.

Is EC2 able to participate in Active Directory?
It is possible that you are not successfully participating in AD, so please try to participate using the steps in the document below.
Also, check the DNS settings of Windows EC2 and see if you can refer to the Managed AD IP address.
https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/join-a-computer-to-a-domain

profile picture
전문가
답변함 3달 전
  • Hi Riku, thanks for providing your response.

    I have tried the manual way of going into the EC2 instance and enroll the domain. After restarting the EC2 instance it showed that it had enrolled into the domain. However, when trying corp\admin, it failed.

    I had once I managed to get it through, but subsequently it failed, despite me creating and deleting the directory multiple times, trial and error.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인