Active Directory Administration Cookbook

Creating the script

With the AD FS server role installed, we can use the PowerShell cmdlet to create the SQL scripts to create the databases on the SQL Server backend.

Use the following lines of PowerShell to install the AD FS server role in an elevated window:

New-Item "C:\ADFSSQLScript" -Type DirectoryExport-AdfsDeploymentSQLScript -DestinationFolder "C:\ADFSSQLScript" -ServiceAccountName LUCERNPUB\ADFSgMSA$

Change the values for the folder and the gMSA in the preceding lines of PowerShell.

As the gMSA's object type originates from the computer object type, make sure to add $ at the end of the object name in the script.

This will create two files in the specified folder, as follows:

• CreateDB.sql
• Set-Permissions.sql