ESXi

 View Only
  • 1.  ESX join to AD and then set permission on each ESX.

    Posted Jan 30, 2014 02:51 PM

    Hi guys,

    Found this great script online that joins all ESX to domain. I am trying to modify it and also set permissions on each ESX server to a security group or a username. I can't really get it to work as it does set the permission but it set it within vcenter itself for that host and I want the permission to be set within ESX. I am using the option with vcenter so I am guessing once PS connect to Vcenter it needs to reconnect to ESX to do that.

    These are the lines I added to the script but it still doesnt work. I would request anyone with more experience on powercli to help me fix this.

    Appreciate it. BTW I want to give credit to whoever created this script initially.

        #Set Active Directory Permissions within each ESX host

    connect-viserver $VMHost -credential $VMHosts_creds > $NULL 2>&1          

    New-VIPermission -Principal "domain\username" -role admin -entity $getvmhost

    disconnect-viserver $VMHost -confirm:$false



  • 2.  RE: ESX join to AD and then set permission on each ESX.

    Posted Jan 31, 2014 08:55 AM

    You need to use the -VMHosts option and not the vc option. This will allow you to connect to the hosts and add the permissions directly to the esxi server.



  • 3.  RE: ESX join to AD and then set permission on each ESX.

    Posted Feb 03, 2014 05:16 PM

    yea I know but what I am trying to do is to not specify each ESX host .. I would like to go into vcenter itself pick up the list and then set permissions for each host... using this script..shouldn't be that hard once connected to vcenter then connect to each host do the job and then exit.



  • 4.  RE: ESX join to AD and then set permission on each ESX.

    Posted Feb 03, 2014 09:10 PM

    I think if you get rid of $getvmhost and use $VMHost instead. When calling $VMHost within commands use $VMHost.Name. This will only select the name property of object being passed in the loop, otherwise you are passing all properties  for the oject in $VMHost which could be causing an issue. I am not able to view the script at this moment and going off of memory.

    Also, you might try using this script as a template and creating a new script. Might find the new script less confusing.