System information
17
Deploying Parallels Mac Management for Microsoft SCCM 2012
3 Right-click CN=System and select New > Object... in the context menu.
4 In the Select a class list, select container and click Next.
5 In the value field, type "ParallelsServices" (without quotes) and click Next.
6 Click Finish.
7 In the ADSI Edit window, right-click CN=ParallelsServices and then select Properties in the
context menu.
8 In the container properties dialog, select the Security tab.
9 Add the domain user that you created earlier to the Group or user names list and grant the
user Read, Write, and Create all child objects permissions.
Create the "CN=Parallels Management Suite" container and grant the user
permissions to write to it
This container is used for storing the Parallels Mac Management role-based access control
information (RBAC).
Note: Skip steps 1 through 7 if the container already exists.
1 In the ADSI Edit window, navigate to Default naming context / DC=<domain>,DC=<com> /
CN= Program Data.
2 Right-click CN= Program Data and then select New > Object... in the context menu.
3 In the Select a class list, select container and click Next.
4 In the value field, type "Parallels" (without quotes), click Next and then click Finish.
5 In the ADSI Edit window, right-click CN= Parallels and click New > Object... in the context
menu.
6 Select container and click Next. Type "Parallels Management Suite" and click Next.
7 Click Finish.
8 Right-click CN=Parallels Management Suite and then click Properties in the context menu.
9 Select the Security tab and add your domain user to the Group or user names list.
10 Grant the user Read, Write, and Create all child objects permissions.
Grant the user permissions to read/write Service Principal Name
These rights are required for the RBAC functionality. The Parallels Configuration Manager Proxy
service account must have a registered Service Principle Name (SPN) for Kerberos connections. By
default (with some exceptions) users are not permitted to register SPN to their own accounts.
1 In the ADSI Edit window, navigate to the CN=Users node and select the user that will be used
to run the Parallels Configuration Manager Proxy service.