Install the Management Console

This section provides information on management console requirements and installing the console.

Requirements to Use AD Bridge with Active Directory

This section lists the requirements to use AD Bridge Enterprise with Active Directory.

You must have at least the following components:

  • An Active Directory domain controller
  • A Windows administrative workstation that is running ADUC and is connected to your Active Directory domain controller
  • One or more Unix or Linux computers running an operating system that AD Bridge Enterprise supports, such as versions of Red Hat, SUSE Linux, Fedora, CentOS, Debian, Sun Solaris, IBM AIX, HP-UX, and Ubuntu

For agent requirements (the software that runs on the Linux or Unix computers that you want to connect to AD), please see Install the AD Bridge Enterprise Agent.

Microsoft Management Tools

AD Bridge Enterprise works with ADUC, GPME, and GPMC. Ensure that the Microsoft management tools are installed before you install AD Bridge Enterprise.

The Microsoft management tools vary by Windows version, but include the Remote Server Administration Tools (RSAT) for Windows.

Turn Windows features on or off

Turn on the following RSAT features. Go to Control Panel, select Programs, and then select Turn Windows features on or off:

  • Group Policy Management Tools
  • Active Directory Module for Windows PowerShell
  • Active Directory Administrative Center
  • AD DS Snap-ins and Command-Line Tools

 

For more information, please see Remote Server Administration Tools for Windows.

Administrator Privileges

  • Root access or sudo permission on the Linux or Unix computers that you want to join to the domain.
  • Active Directory credentials that allow you to add computers to an Active Directory domain. For example, membership in the Domain Administrators security group or the Enterprise Administrators security group.

Active Directory Requirements

  • Windows Server 2008 R2 or higher

Windows Requirements for the Console

  • One of the following operating systems:
    • Windows 10 or higher with RSAT
    • Windows Server 2008 R2 or higher
    • 64-bit versions only
  • Microsoft .NET Framework 4.5
  • 50MB of free space

Requirements to Run AD Bridge Enterprise in Directory Integrated Mode

  • Active Directory installations that comply with RFC 2307
  • Domain and forest functional levels have been raised to Windows Server 2003 or later

For more information, please see Storage Modes in Active Directory.

Networking

The subnets with your Linux or Unix computers must be added to Active Directory sites before joining the computers to Active Directory so that the AD Bridge Enterprise agent can detect the optimal domain controller and global catalog.

Replication

Make sure your AD replication system is up to date and functioning properly by using the following diagnostic tools from www.microsoft.com/download to test replication.

  • DCDiag: Part of Microsoft's support tools for Windows Server 2003, dcdiag.exe should be run with the /v /c /e switches to test the domain controllers in all your sites.
  • FRSDiag: Use frsdiag.exe tool, available from the Microsoft Resource Kit tools, to check the File Replication Service (FRS).

In addition, the following tools can help you review and troubleshoot FRS problems.

  • Sonar: Use it to perform a quick review of FRS status.
  • Ultrasound: Use it to monitor and troubleshoot FRS.
  • ReplMon: Included in the Microsoft Resource Kit Tools. Use it to investigate replication problems across links where DCDiag showed failures.

For instructions, see the Microsoft documentation for each tool.

Supported Platforms and Applications

Platforms

AD Bridge Enterprise supports many Linux or Unix and virtualization platforms.

Applications

You can use the Advanced Group Policy Management (AGPM) tool to manage your GPOs. Any AD Bridge Enterprise settings applied to your GPOs are maintained.

Install the Console

Install the BeyondTrust Management Console on a Windows administrative workstation that can connect to your Active Directory domain controller.

We recommend that you do not install the console on a domain controller.

  • Review the requirements before proceeding with the installation.
  • Ensure the account you are using to run the install is a member of the Domain Admins group or Enterprise Admins group. The account needs privileges to change objects and child objects in Active Directory.
  • Ensure the Microsoft management tools for Active Directory are installed before you install the console.

During the installation, checks are in place to ensure that your environment meets successful installation requirements. If you need more information, a log file is created here during the install: %UserProfile%AppData\Local\PBIS.Logs.

  1. Locate and copy the ADBridge64-*.exe install file to your Windows workstation. The installer file includes the version and build number.
  2. Run ADBridge64-*.exe.
  3. On the License Agreement page, accept the terms of the license and go through the installation wizard.
  4. Click Finish.
  5. At the end of the installation you can choose to start the configuration wizard to configure Directory Integrated mode. You can run this wizard later from the default install location C:\Program Files\BeyondTrust\PBIS\Enterprise.

  1. Go through the configuration wizard pages. On the Promote Attributes page, review the state of the attributes.
  1. Select Promote Attributes. The account running the configuration wizard requires permissions to the Active Directory schema.
  2. After the attributes are successfully promoted, click Next.
  3. Select one of the AD Bridge components to continue. Otherwise, click Finish.

For more information, please see the following:

Use msiexec.exe

Silent Install

Run a silent install or uninstall of the console using msiexec.exe. To see a complete list of options, run msiexec.exe.

msiexec.exe /i ADBridge64-x.x.x.xxx.msi /quiet /qn
msiexec.exe /x ADBridge64-x.x.x.xxx.msi /quiet /qn

Install Individual Modules

Install individual AD Bridge modules using msiexec.exe. The following module options are available:

  • BaseInstall
  • ConsoleInstall
  • ReportingToolsInstall
  • OperationsDashboard
  • DBUpdateTool
  • MigrationToolsInstall
  • MMCExtensions
  • MigrationToolsInstall
  • GPMC
  • ADUC
msiexec /i ADBridge64-x.x.x.xxx.msi ADDLOCAL=BaseInstall /qn

Upgrade the Console

To upgrade to the latest version of AD Bridge Enterprise, first uninstall the existing version. Then, before installing the latest version of AD Bridge Enterprise, install the latest version of Group Policy Management Console (GPMC) and run Windows update to make sure your workstation has the latest XML patches.