Description Michael Grandjean 2015-12-02 20:16:24 CET

We should state clearly in the manual that UCS can't be an Active Directory Domaincontroller itself when operating in AD member mode.

There is a good explanation in "9.3. Active Directory Connection" and the following sections on how the member mode works and if you pay close attention, you should come to the conclusion that UCS cannot be an Active Directory Domaincontroller itself, but we don't say it. This regularly confuses people (e.g. 2015112021000035).

Maybe this:

> In the configuration of a UCS server system as a member of an AD domain (AD
> member mode), the AD functions as the primary directory service and the
> respective UCS system joins the trust context of the AD domain.

Could become something like this:

> In the configuration of a UCS server system as a member of an AD domain (AD
> member mode), the AD functions as the primary directory service and the
> respective UCS system joins the trust context of the AD domain. Because of
> this, the UCS system will not be able to operate as an AD domain controller
> itself.