{"id":1539,"date":"2022-10-10T07:05:09","date_gmt":"2022-10-10T07:05:09","guid":{"rendered":"https:\/\/www.nicktailor.com\/?p=1539"},"modified":"2022-10-10T07:24:58","modified_gmt":"2022-10-10T07:24:58","slug":"how-to-join-windows-servers-to-your-dc-with-ansible","status":"publish","type":"post","link":"https:\/\/nicktailor.com\/tech-blog\/how-to-join-windows-servers-to-your-dc-with-ansible\/","title":{"rendered":"How to Join Windows Servers to your DC with Ansible"},"content":{"rendered":"
\n
\n
\u2022<\/span>\u00a0<\/span>This role will simply join a new windows server to the domain<\/strong><\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>You simply need to define the passed parameters in defaults\/<\/span>main.yml<\/span> indicated below<\/strong><\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>This role will ask you for the domain admin password at runtime<\/span> so you will need to know it. Don\u2019t need to worry about vaulting the admin AD password in the code<\/strong><\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>This role assume your windows host is already configured to use winrm<\/span><\/strong><\/div>\n<\/div>\n<\/div>\n

How to use this role:<\/span><\/p>\n

\n
\n
1.<\/span>You must first download the git repository into your <\/span>roles<\/span> directory usually ansible\/role\/<\/span><\/div>\n
\n
\n
a.<\/span>git clon<\/span>e <\/span>https:\/\/github.com\/Perfect10NickTailor\/add-server-to-dc.git<\/a><\/div>\n<\/div>\n
\n
b.<\/span>https:\/\/github.com\/Perfect10NickTailor\/add-server-to-dc<\/a><\/div>\n

.<\/span><\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n

\n
2.<\/span>Now you want edit the <\/span>hosts.client<\/span> file <\/span>name file or create it if it doesn\u2019t exist<\/span> under your \u201c<\/span>ansible\/inventory\/<\/span>dev:staging:prod<\/span>\u201d directory. This is a good way to separate environments with ansible, inside each environment you should have a <\/span>hosts.file<\/span> like indicated below.<\/span><\/div>\n

Example file<\/span>: <\/span>hosts.<\/span>dev<\/span>, <\/span>hosts.staging<\/span>, <\/span>hosts.prod<\/span><\/p>\n

\n
\n
c.<\/span>Put your server under the appropriate group inside the file and save<\/span><\/div>\n
\n
\n
i.<\/span>Testmachine1.nicktailor.com<\/em><\/span>l<\/em><\/span> ansible_host<\/em><\/span>=192.168.<\/em><\/span>1.101<\/em><\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Note: If there is no group simply list the server outside group<\/span>ing, the –limit flag will pick it <\/span><\/p>\n

up.<\/span><\/p>\n

\n
\n
3.<\/span>Now inside this directory you should see <\/span>hosts<\/span><\/strong> & <\/span>host_vars<\/span>, <\/span>group_vars<\/span><\/strong><\/div>\n

Descriptions:<\/span><\/strong><\/p>\n

\n
\n
d.<\/span>Hosts. <\/span><\/strong>\u2013 is where you will list your servers under specific groups which tell the playbook (what the server is, if it the server should have a specific task run on it, and how to find it)<\/span><\/div>\n<\/div>\n
\n
e.<\/span>Host_vars<\/span> <\/strong>\u2013 Inside this directory is where you list the server by name which is you will list under hosts. Inside these files you pass variable parameters to the specific roles when running your playbook. Without these the playbook <\/span>cant<\/span> do the tasks you want it to.<\/span><\/div>\n<\/div>\n
\n
f.<\/span>Group_vars<\/span> \u2013 <\/span><\/strong>Are how a way to group variables for sets of servers and this keeps code cleaners and easier to manage<\/span>.<\/span><\/strong><\/div>\n<\/div>\n<\/div>\n

Operational Use:<\/span><\/strong><\/p>\n<\/div>\n

\n
4.<\/span>Move inside <\/span>host_var<\/span><\/strong><\/div>\n
\n
\n
g.<\/span>cd <\/span>host_var<\/span><\/div>\n<\/div>\n
\n
h.<\/span>create a file called <\/span>{{ <\/span>servername<\/span> }} and save it for us its<\/span> testmachine1.nicktailor.com<\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

\n
\n
5.<\/span>Now inside this directory you should see <\/span>hosts<\/span><\/strong> & <\/span>host_vars<\/span>, <\/span>group_vars<\/span><\/strong><\/div>\n

Descriptions:<\/span><\/strong><\/p>\n

\n
\n
i.<\/span>Hosts. <\/span><\/strong>\u2013 is where you will list your servers under specific groups which tell the playbook (what the server is, if it the server should have a specific task run on it, and how to find it)<\/span><\/div>\n<\/div>\n
\n
j.<\/span>Host_vars<\/span> <\/strong>\u2013 Inside this directory is where you list the server by name which is you will list under hosts. Inside these files you pass variable parameters to the specific roles when running your playbook. Without these the playbook <\/span>cant<\/span> do the tasks you want it to.<\/span><\/div>\n<\/div>\n
\n
k.<\/span>Group_vars<\/span> \u2013 <\/span><\/strong>Are how a way to group variables for sets of servers and this keeps code cleaners and easier to manage<\/span>.<\/span><\/strong><\/div>\n<\/div>\n<\/div>\n

Operational Use:<\/span><\/strong><\/p>\n<\/div>\n

\n
6.<\/span>Move inside <\/span>host_var<\/span><\/strong><\/div>\n
\n
\n
l.<\/span>cd <\/span>host_var<\/span><\/div>\n<\/div>\n
\n
m.<\/span>create a file called <\/span>{{ <\/span>servername<\/span> }} and save it for us its <\/span>testmachine1.nicktailor.com<\/span><\/div>\n<\/div>\n
\n
n.<\/span>add the following parameters to your inventory file and save.<\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

passed parameters: <\/span>example: <\/span>roles\/add-server-to-dc\/default\/<\/span>main.yml<\/span><\/strong><\/p>\n

dns_domain_name<\/span>: <\/span>ad.nicktailor.com<\/span><\/p>\n

computer_name<\/span>: <\/span>testmachine1<\/span><\/p>\n

domain_ou_path<\/span>: <\/span>“OU=<\/span>Admin,DC<\/span>=<\/span>nicktailor,DC<\/span>=local”<\/span><\/p>\n

domain_admin_user<\/span>: <\/span>adminuser@nicktailor.com<\/span><\/p>\n

state<\/span>: <\/span>domain<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Running your playbook: <\/span><\/strong><\/p>\n

\n
\n
1.<\/span>You must run your play book from inside parent directory always \u201c<\/span>ansible<\/span>\u201d<\/span><\/strong><\/div>\n<\/div>\n
\n
2.<\/span>Now there is a playbook called <\/span>joinservertodomain.yml<\/span> in the <\/span>ansible<\/span> directory which simply calls the<\/span><\/strong> add-servers-to-dc <\/span>role inside the <\/span>roles<\/span> directory.<\/span><\/strong><\/div>\n

Example: of <\/span>ansible<\/span>\/<\/span>joinservertodomain.yml<\/span><\/strong><\/p>\n<\/div>\n<\/div>\n

– <\/span>hosts<\/span>: <\/span>all<\/span><\/p>\n

\u00a0\u00a0<\/span>gather_facts<\/span>: <\/span>no<\/span><\/p>\n

\u00a0\u00a0<\/span>vars_prompt<\/span>:<\/span><\/p>\n

\u00a0 – <\/span>name<\/span>: <\/span>domain_pass<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>prompt<\/span>: <\/span>Enter Admin Domain Password<\/span><\/p>\n

\u00a0\u00a0<\/span>roles<\/span>: <\/span><\/p>\n

\u00a0 \u00a0 – <\/span>role<\/span>: <\/span>add<\/span>–<\/span>server<\/span>s-<\/span>to<\/span>–<\/span>dc<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Command:<\/span><\/strong><\/p>\n

ansible-playbook –<\/span>i<\/span> inventory\/dev\/hosts <\/span>joinservertodomain.yml<\/span> –<\/span>–<\/span>limit=’<\/span>testmachine1.nicktailor.com<\/span>‘<\/span><\/strong><\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>-i : This flag tells ansibe-playbook command which hosts file to use, these are always defined by environment like hosts.dev<\/strong> or hosts.staging<\/strong><\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>-u : this is the ssh_user you will be connecting to the servers with<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>-Kkb : this tells ansible that you will be using sudo su \u2013 for the ssh_user when running all role\/tasks<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>-ask-beocme : is saying become root<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>-limit=\u2019server\u2019 : this allows you to segement which server you want to run the playbook against.<\/div>\n

.<\/span><\/span><\/p>\n

Successful example run of the book:<\/p>\n<\/div>\n<\/div>\n

.<\/span><\/span><\/p>\n

[<\/span>alfred<\/span>@<\/span>ansible.nicktailor.com<\/span> ~<\/span>]<\/span>$<\/span> ansible-playbook –<\/span>i<\/span> inventory\/hosts <\/span>joinservertodomain.yml<\/span> –limit=’<\/span>testmachine1.nicktailor.com<\/span>‘<\/span><\/p>\n

ansible-playbook<\/span> 2.9.27<\/span><\/p>\n

\u00a0\u00a0<\/span>config file = \/etc\/ansible\/<\/span>ansible.cfg<\/span><\/p>\n

\u00a0\u00a0<\/span>configured module search path = [‘\/home\/<\/span>alfred<\/span>\/.ansible<\/span>\/plugins\/modules’, ‘\/<\/span>usr<\/span>\/share\/ansible\/plugins\/modules’]<\/span><\/p>\n

\u00a0\u00a0<\/span>ansible python module location = \/<\/span>usr<\/span>\/lib\/python3.6\/site-packages\/ansible<\/span><\/p>\n

\u00a0\u00a0<\/span>executable location = \/<\/span>usr<\/span>\/bin\/<\/span>ansible-playbook<\/span><\/p>\n

\u00a0\u00a0<\/span>python version = 3.6.8 (default, Nov 10<\/span> 2021<\/span>, 06:50:23) [GCC 8.5.0 20210514 (Red Hat 8.5.0-3.0.2)]<\/span><\/p>\n

.<\/span><\/span><\/p>\n

PLAYBOOK<\/span>: <\/span>joinservertodomain.yml<\/span> *****************************************************************************************************************************************************<\/span><\/p>\n

Positional arguments<\/span>: <\/span>joinservertodomain.yml<\/span><\/p>\n

verbosity<\/span>: <\/span>4<\/span><\/p>\n

connection<\/span>: <\/span>smart<\/span><\/p>\n

timeout<\/span>: <\/span>10<\/span><\/p>\n

become_method<\/span>: <\/span>sudo<\/span><\/p>\n

tags<\/span>: <\/span>(‘all’,)<\/span><\/p>\n

inventory<\/span>: <\/span>(‘\/home\/<\/span>alfred<\/span>\/inventory\/hosts’,)<\/span><\/p>\n

subset<\/span>: <\/span>testmachine1.nicktailor.com<\/span><\/p>\n

forks<\/span>: <\/span>5<\/span><\/p>\n

1 <\/span>plays<\/span> in <\/span>joinservertodomain.yml<\/span><\/p>\n

Enter Domain Password<\/span>: <\/span><\/p>\n

.<\/span><\/span><\/p>\n

PLAY [all] ***********************************************************************************************************************************************************************<\/span><\/p>\n

META<\/span>: <\/span>ran handlers<\/span><\/p>\n

.<\/span><\/span><\/p>\n

TASK [<\/span>addservertodc<\/span> : <\/span>Join windows host to Domain Controller] ********************************************************************************************************************<\/span><\/p>\n

task path<\/span>: <\/span>\/home\/<\/span>alfred<\/span>\/roles\/<\/span>addservertodc<\/span>\/tasks\/main.yml:1<\/span><\/p>\n

Using module file \/usr\/lib\/python3.6\/site-packages\/ansible\/modules\/windows\/win_domain_membership.ps1<\/span><\/p>\n

Pipelining is enabled.<\/span><\/p>\n

<<\/span>testmachine1.nicktailor.com<\/span>> ESTABLISH WINRM CONNECTION FOR USER<\/span>: <\/span>ansibleuser<\/span> on PORT 5986 TO <\/span>testmachine1.nicktailor.com<\/span><\/p>\n

EXEC (via pipeline wrapper)<\/span><\/p>\n

changed<\/span>: [<\/span>testmachine1.nicktailor.com<\/span>] <\/span>=> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>“changed”<\/span>: <\/span>true,<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>“<\/span>reboot<\/span>_required<\/span>“<\/span>: <\/span>true<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

TASK [<\/span>addservertodc<\/span> : <\/span>win_reboot<\/span>] ************************************************************************************************************************************************<\/span><\/p>\n

win_reboot<\/span>: <\/span>system successfully rebooted<\/span><\/p>\n

changed<\/span>: [<\/span>testmachine1.nicktailor.com<\/span>] <\/span>=> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>“changed”<\/span>: <\/span>true,<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>“elapsed”<\/span>: <\/span>23,<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>“rebooted”<\/span>: <\/span>true<\/span><\/p>\n

}<\/span><\/p>\n

META<\/span>: <\/span>ran handlers<\/span><\/p>\n

META<\/span>: <\/span>ran handlers<\/span><\/p>\n

.<\/span><\/span><\/p>\n

PLAY RECAP ***********************************************************************************************************************************************************************<\/span><\/p>\n

testmachine1.nicktailor.com<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>\u00a0 :<\/span> ok=2 \u00a0 \u00a0changed=2 \u00a0 \u00a0unreachable=0 \u00a0 \u00a0failed=0 \u00a0 \u00a0skipped=0 \u00a0 \u00a0rescued=0 \u00a0 \u00a0ignored=0<\/span>\u00a0\u00a0\u00a0<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u2022\u00a0This role will simply join a new windows server to the domain \u2022\u00a0You simply need to define the passed parameters in defaults\/main.yml indicated below \u2022\u00a0This role will ask you for the domain admin password at runtime so you will need to know it. Don\u2019t need to worry about vaulting the admin AD password in the code \u2022\u00a0This role assume yourRead More …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,51,137],"tags":[],"class_list":["post-1539","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-ansible","category-windows"],"_links":{"self":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/1539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/comments?post=1539"}],"version-history":[{"count":4,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/1539\/revisions"}],"predecessor-version":[{"id":1544,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/1539\/revisions\/1544"}],"wp:attachment":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/media?parent=1539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/categories?post=1539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/tags?post=1539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}