Open PowerShell as Administrator

Log in to a domain controller (or a management host with AD tools) and open Windows PowerShell as Administrator.

Create the Managed Service Account

Run the following command (example) to create the MSA. Adjust values to match your environment.

New-ADServiceAccount -Name sdoSVC -DNSHostName sdoSVC@ws-fedush.online -PrincipalsAllowedToRetrieveManagedPassword remotead$ -ManagedPasswordIntervalInDays 1
        

Open Active Directory Users and Computers

1. Open Windows Administrative Tools
2. Click Active Directory Users and Computers
3. Go to Users

Add the MSA to Domain Admins

1. Open Domain Admins → Properties
2. Go to Members
3. Click Add and add the Managed Service Account you created
4. Click OK until all dialogs are closed

Create a new Remote AD Agent in the Admin Portal

1. Click Directories
2. Click Agents
3. Click CREATE AGENT
4. Give the agent a name
5. Click CREATE

Download the installation file

1. Click the Download icon next to the agent
2. Click DOWNLOAD INSTALLATION FILE
3. 

Run the installer and enter the installation details

1. Run the installer as Administrator
2. Click Next
3. Accept the license agreement and click Next
4. Copy the Installation Code from the portal and paste it into the installer
5. Copy the Server URL from the portal and paste it into the installer, then click Next

Configure the agent service account (Managed Service Account)

1. Type the Managed Service Account in this format:

domain\MSA$

1. Check Manage Service Account
2. Click Next → Next → Install

Authenticate with Octopus Authenticator

1. Click Login with Octopus Authenticator
2. Type the admin username, click Login, and approve the authentication from the mobile device

Select Domain / OU and register

1. Type the Domain or OU and click Search
2. Select the Domain/OU and click Next
3. Click Register → OK → Finish → CLOSE

Verify connection, sync, publish, and validate users

1. Click Advanced
2. Verify that the connection is in Green state and return to Directories
3. Click sync
4. Click PUBLISH twice (publish + confirmation)
5. Click Manage Users and confirm that the users are synced