Unable to install AD Services on VM

Question

Hi&nbsp;I am testing out a new dev/test SharePoint farm in Azure which isn't joined to the local lan.&nbsp;Anyway I have got as far as setting up the DS . &nbsp;&nbsp;&nbsp;&nbsp;Install-WindowsFeature -ComputerName "myserver" AD-Domain-Services -IncludeManagementToolsInstall-WindowsFeature : Cannot validate argument on parameter 'ComputerName'. The argument is null or empty. Providean argument that is not null or empty, and then try the command again.At line:1 char:38+ Install-WindowsFeature -ComputerName $adVm AD-Domain-Services -Includ ...+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ~~~~~&nbsp;&nbsp;&nbsp; + CategoryInfo&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : InvalidData: (:) [Install-WindowsFeature], ParameterBindingValidationException&nbsp;&nbsp;&nbsp; + FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.Windows.ServerManager.Commands.AddWindowsFeat&nbsp;&nbsp; ureCommand&nbsp;&nbsp;&nbsp;To resolve this, I have&nbsp;I have installed Remote Server Administration Tools for Windows 10Started WInRMSet-Item -Path WSMan:\localhost\Client\TrustedHosts -Value myVMI am assuming&nbsp; I won't be able to use the&nbsp; AD DS Deployment Commandlets directly from my win10 client , until this issue is resolved&nbsp;Just name resolution I guess?&nbsp;&nbsp;&nbsp;&nbsp;

kasunsjc · Answer

Hi Daniel,&nbsp;Use Enter-PSSession to login for the DC then you can install ADDS.&nbsp;What I can see in the error is it cant resolve the computer name are you storing the computer name as a variable?

daniel westerdale · Answer

Hi @KasunThanks your reply. I will look into adding this to my script. BTW were my WinRM settings correct?I store the server name, location and resource group as variables.I will let you know how this goes on Monday.

kasunsjc · Answer

One important thing did you allow WinRM&nbsp; from Network security group that attached to nic of the VM?&nbsp;Yes your WinRM setting is correct and make sure you have run the winrm qc command on you client pc to allow firewall rules&nbsp;

daniel westerdale · Answer

kasunsjc wrote:
One important thing did you allow WinRM&nbsp; from Network security group that attached to nic of the VM?
&nbsp;
Yes your WinRM setting is correct and make sure you have run the winrm qc command on you client pc to allow firewall rules&nbsp;

Hi
&nbsp;
I have another chance to look at this today.&nbsp;I restarted my VM and noted my IPAddress
&nbsp;
I think the rule needed to allow my WInRM access is set below
$rule4 = New-AzureRMNetworkSecurityRuleConfig -Name "WinRM_HTTP" -Description "Allow WinRM traffic over http"&nbsp; -Access Allow -Protocol Tcp -Direction Inbound -Priority 103 -SourceAddressPrefix * -SourcePortRange * -DestinationAddressPrefix * -DestinationPortRange 5985
Next,&nbsp; I need to add my VM to be trusted Host since I am using HTTP, start simple eh!
winrm set winrm/config/client '@{TrustedHosts="adVM"}'
&nbsp;
Now, I hit my issue. I still don't see the how I can resolve the DNS address of my VM if I am on a different subnet.
&nbsp;
Here is another test
Test-WsMan $pip.IpAddress
Test-WsMan : &lt;f:WSManFault 
xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150859046" 
Machine="WSLDEV2015"&gt;&lt;f:Message&gt;WinRM cannot complete the operation. Verify that the 
specified computer name is valid, that the computer is accessible over the network, 
and that a firewall exception for the WinRM service is enabled and allows access from 
this computer. By default, the WinRM firewall exception for public profiles limits 
access to remote computers within the same local subnet. &lt;/f:Message&gt;&lt;/f:WSManFault&gt;
At line:1 char:1
+ Test-WsMan $pip.IpAddress
&nbsp;
&nbsp;
&nbsp;
&nbsp;

daniel westerdale · Answer

Hi
&nbsp;
All is now working.........Thanks for your advice.
&nbsp;
&nbsp;
1) On the Azure Portal I noticed the NIC reported that there was no assigned&nbsp; Network Security Group. I thought this was odd as I gone through the test lab steps a few times and I know the NSG has been created correctly.
&nbsp;
These were some of my steps
&nbsp;
$nsg=Get-AzureRMNetworkSecurityGroup -Name SP2016Subnet -ResourceGroupName $rgName

Set-AzureRMVirtualNetworkSubnetConfig -VirtualNetwork $vnet -Name SP2016Subnet -AddressPrefix "10.0.0.0/24" -NetworkSecurityGroup $nsg

$nic = Get-AzureRMNetworkInterface -Name ($vmName + "-NIC") -ResourceGroupName $rgName
# line below shows a null
$nic.NetworkSecurityGroup

# this appeared to work but didn't when viewed onthe ADmin portal
$nic.NetworkSecurityGroup = $nsg

Q: why didn't the above work?&nbsp;
Next, in the Admin Portal, I navigated to the Network section and added my NSG
&nbsp;
2) I RDPed to my VM and checked&nbsp; WinRM was allowed etc. All looked good
&nbsp;
3) on my laptop
I set the just the iP Address
 winrm set winrm/config/client '@{TrustedHosts="[PIP]"'
Q: I can't see how my laptop could ever resolve the&nbsp; VM ( ComputerName) address unless I messed around with the Hosts file .&nbsp;&nbsp;
&nbsp;
4) Finally,
&nbsp;
&gt;Enter-PSSession -ComputerName [PiP}   'mylocalserverAdmin'&gt;Install-WindowsFeature AD-Domain-Services -IncludeManagementToolsSuccess Restart Needed Exit Code Feature Result ------- -------------- --------- -------------- True No Success {Active Directory Domain Services, Group P...
&nbsp;
&nbsp;
&nbsp;

Forum Discussion

Unable to install AD Services on VM

6 Replies

Resources