Join Fortiauthenticator in domain

Hello,

I am trying to join Fortiauthenticator as a machine in windows AD.

I am following this document :

I do not want to use adminsitrator account for this operation for security reasons. Is there any other way how to do it?

Best answer by dbu

-Make sure you have configured and internal DNS server on the DNS configuration.
-FortiAuthenticator must be able to resolve and reach the domain to join.
-Check also if NTP is in sync with the domain. It is wise to use same NTP server so they are in sync.

If you still face issues follow this document and troubleshoot further:
https://community.fortinet.com/t5/FortiAuthenticator/Troubleshooting-Tip-FortiAuthenticator-error-Failed-to-join/ta-p/193327

Staff

Hi @Larsen ,
Yes you can use a non administrator account. I am not sure if you found this document on how to create a user for this purpose and how to restrict privileges:
https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-FortiAuthenticator-join-to-Windows-AD-with-non/ta-p/214599

Explorer III

Thanks for the fast reply @dbu .

I followed the guide and still failing to join the domain.

I see error: Failed to join Wndows AD network.

What am i missing?

dbuAnswer

Staff

-Make sure you have configured and internal DNS server on the DNS configuration.
-FortiAuthenticator must be able to resolve and reach the domain to join.
-Check also if NTP is in sync with the domain. It is wise to use same NTP server so they are in sync.

If you still face issues follow this document and troubleshoot further:
https://community.fortinet.com/t5/FortiAuthenticator/Troubleshooting-Tip-FortiAuthenticator-error-Failed-to-join/ta-p/193327

Explorer III

It looks like it was an NTP issue. I configured the same NTP server and now it joined the domain.

Staff

Glad to hear i was able to help.

Sign up