Create AD Users with Custom Script Extension

Question

Is it possible to create AD Users (and generally run AD cmdlets) with Custom Script Extension on Azure machines?

I see that CSE is running as SYSTEM. It also doesn't start any scripts that I am trying to run as a different user, e.g.

#try1
Start-Process Powershell.exe -ArgumentList C:\MyScript.ps1 -Credential $VMcred

#try2
$farmSession = New-PSSession -Credential $VMcred -ComputerName $env:computername            
Invoke-Command -Session $farmSession -Script `
{ #MyScriptHere}

Is the solution to assign AD permissions to a SYSTEM account?
Or PSRemoting is a must in this case?

Sa Yang · Accepted Answer · 2017-12-14 06:38:17Z

2

I think your scripts won't work. Since the Custom Script Extension is running as a System account, you cannot change it running as another different user.

Solution:

First, you can run the regular powershell cmdlets with Custom script extension. But you will failed with it, Then you should RDP to your VM and find the error massage in the Event Viewer. Then you can follow this blog to assign permissions to System account.

After assigning permissions, you will succeed running the same powershell cmdlets with Custom script extension.

By the way, I don't understand why you need CSE to add ad users for your DC on Azure VM. Why not just add it by RDP the VM and run powershell or else. Custom script extension is usually used for some tasks when user cannot RDP the VM .

edited Dec 14, 2017 at 6:38

answered Dec 14, 2017 at 2:01

Sa Yang

9,4042 gold badges24 silver badges41 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Create AD Users with Custom Script Extension

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related