Manage Workgroups and ADS Domains

Use the following CLI commands to manage your DXi system's connection to workgroups or Active Directory Service (ADS) domains.

Note: NAS is only available on certain DXi models. See your DXi User's Guide to determine whether NAS is available for your model.

Join ADS

Join the Samba server to an ADS domain.

Command

syscli ‑‑join ads ‑‑domain <domain_name> [‑‑org <organizational_unit>] ‑‑admin <domain_user_authorized_to_join> [‑‑password <domain_user_password>] [‑‑pdc <primary_domain_controller>] [‑‑prewin2kdomain <preWindows 2000 domain_name>]

Command Attributes

Review the following attribute descriptions

`‑‑join ads`	Joins the Samba server to an ADS domain.
`‑‑domain <domain_name>`	Enter the name of the ADS domain to which to join the Samba server.
`‑‑org <organizational_unit>`	If specified, an organizational unit to assign to the domain.
`‑‑admin <domain_user authorized_to_join>`	Enter the user name for the account that has the right to join the domain. Note: This domain user is defined in the ADS domain and is not necessarily the system’s admin user.
`‑‑password <domain_user_password>`	Enter the password for the admin account. You can choose not to supply the password on the command line. In this case the CLI prompts you for the password and does not echo the response for security purposes.
`‑‑pdc <primary_domain_controller>`	Enter the host name or IP address of the Primary Domain Controller (PDC). If you do not specify the PDC, the CLI tries to discover it automatically.
`‑‑prewin2kdomain <preWindows_2000_domain_name>`	The pre-Windows 2000 domain name is also known as the NetBIOS domain name, which is 15 characters or less. This name can be specified via the `‑‑prewin2kdomain` option. Normally you do not need to specify this option because the `‑‑join` command can query the AD DS for the pre-Windows 2000 domain name. However, the NetBIOS domain name is sometimes incorrect, such as being longer than 15 characters, causing the `‑‑join` command to fail. This failure can happen in an environment with multiple domain controllers with some of them being misconfigured. If a failure occurs Specify `‑‑prewin2kdomain` explicitly in the join command. The CLI uses the value instead of querying the domain server/controller. If the domain has more than one domain controllers, specify `‑‑pdc` explicitly with the hostname or IP of each domain controller. If a domain controller returns the correct NetBIOS domain name, the join command succeeds. You may need to try rerunning the command with multiple domain controllers until the join command succeeds.

Disjoin ADS

Disjoin the Samba server from an ADS domain. The command only works when the server is currently joined to an ADS domain.

Command

syscli ‑‑disjoin ads [‑‑admin <admin_user> ‑‑password <admin_password>]

Regardless of the credential provided, the command always succeeds in disjoining the Samba server from the AD DS, with the only difference being the folliowing:

If the credential is correct, the server leaves the AD DS, and its computer account on the AD DS will be disabled.
If the credential is incorrect or not specified, the server leaves the AD DS, and the computer account on the AD DS is not disabled.

This functionality allows you to disjoin the server in cases where the AD DS name has been changed, or the admin_user account is no longer available, such as when the admin_user account owner no longer has this authority or the owner of the is no longer with the company.

Command Attributes

Review the following attribute descriptions.

‑‑disjoin ads

Disjoins the Samba server from the ADS domain.

‑‑admin <admin_user>

Enter the user name of any account that has the right to disjoin the ADS domain.

‑‑password <admin_password>

Enter the password for the admin account.

You can choose not to supply the password on the command line. In this case the CLI prompts you for the password and does not echo the response for security purposes. A password is required when disjoining from an ADS domain.