Join Fortiauthenticator in domain

[Larsen]

Hello,

I am trying to join Fortiauthenticator as a machine in windows AD.

I am following this document :

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Joining-FortiAuthenticator-in-the...

I do not want to use adminsitrator account for this operation for security reasons. Is there any other way how to do it?

[dbu]

Hi @Larsen ,
Yes you can use a non administrator account. I am not sure if you found this document on how to create a user for this purpose and how to restrict privileges:
https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-FortiAuthenticator-join-to-Window...

[Larsen]

Thanks for the fast reply @dbu .

I followed the guide and still failing to join the domain.

I see error: Failed to join Wndows AD network.

What am i missing?

[dbu · Accepted solution]

-Make sure you have configured and internal DNS server on the DNS configuration.
-FortiAuthenticator must be able to resolve and reach the domain to join.
-Check also if NTP is in sync with the domain. It is wise to use same NTP server so they are in sync. 

If you still face issues follow this document and troubleshoot further:
https://community.fortinet.com/t5/FortiAuthenticator/Troubleshooting-Tip-FortiAuthenticator-error-Fa...

[Larsen]

It looks like it was an NTP issue. I configured the same NTP server and now it joined the domain. 

[dbu]

Glad to hear i was able to help.