Hi There,
Our AD structure has several OUs with periods in the name e.g. mycompany.region then sub OUs such as computers etc.
When selecting the target OU to create a new pooled VDI collection in if I try and either select an OU directly from the drop down or manually specify my OU, if the OU has a period "." in the name the operation fails.
So targeting OU=VDI,OU=COMPANY.REGION,DC=company,DC=com will fail with:
"The RD connection Broker Server does not have access to add the virtual desktops to the active directory domain..."
The error is a little misleading as I spend a bit of time pulling my hair out trying to find a non existent permissions problem :-)
This is NOT a permissions problem, I have generated and ran the script to grant correct permissions, and verified they are there. If I take my VDI OU and move it in active directory so my target becomes : OU=VDI,OU=TESTAREA,DC=company,DC=com all is
well.
I created a new top level OU called TEST.AREA and tried selecting directly in the drop down menus (as for some reason you can't drill down into SUB OUs either here) without manually specifying the OU to see if that was the problem and got the same error even though the permissions were correctly granted for the connection broker on the top level OU also.
In short you cannot target an OU to create a collection if a periond "." appears anywhere within any of the OUs in your target.
This appears to be a bug in the UI when creating a pool, I tried escaping the period or enclosing the string with " but no luck. As a workaround I am moving the OU into a temporary path when then moving the OU after creation.
Anyone else come across this or know this is a known issue?
Thanks,
Paul.
