CA API Gateway 9.1

9.4 9.1

Creating a Computer Account for NTLM Authentication

In order to use NTLM Authentication, a computer account must be first be created.
gateway90
In order to use NTLM Authentication, a computer account must be first be created.
The following steps are performed on the Active Directory server.
The information provided here is for your convenience only. The instructions may change without notice. Refer to the Active Directory documentation for further details.
To create a computer account in the Active Directory Server
:
  1. Start the
    Server Manager
     in the Active Directory.
  2. Open
     Active Directory Domain Services
     under 
    Roles.
  3. Expand the
    Active Directory Users and Computers
     node.
  4. Expand the specific directory (in the sample figure above, it is "l7tech.dev").
  5. Right-click the
    Computers
     node to create a new computer account.
  6. Choose the group called "Domain Computers" in the [
    Member of
    ] tab if it is not set by default. This is required before creating a computer account.
  7. Populate the fields in the [
    General
    ] tab. The
    Computer name
     field is required.
To configure the delegation for the newly created computer account:
  1. Open the newly created computer account and select the [
    Delegation
    ] tab.
  2. For the delegation, choose "Trust this computer for delegation to specified services only".
  3. For the trust, choose the 
    Use any authentication protocol
     option.
  4. Click [
    Add
    ]. The "Add Services" dialog appears.
  5. Click [
    Users or Computers
    ].
  6. From the "Search results" list, select the server on which the netlogon service is running, and click [
    OK
    ].
  7. In Add Services, select
    netlogon
     under the Service Type column, and click [
    OK
    ].
  8. The [
    Delegation
    ] tab displays the netlogon service available for the computer account.
  9. The final step is to create a 
    set_password.vbs script
     using the following template:
    Dim objComputer

Set objComputer = GetObject("WinNT://<domain>/computer account name>$")
objComputer.SetPassword "<password>"

Wscript.Quit
    When this is complete, execute the 
    set_password.vbs script.

Content feedback and comments