Creating AD Objects Not in the Domain Controller

big picture objective: trying create wsfc cluster sql server across 2 virtual machines running windows server 2012 r2. both of these vms part of same domain.

issue: creating new cluster (using new-cluster cmdlet through powershell) fails. because domain user using when trying create cluster not have permissions create computer objects in ad ds.

attempt @ resolving issue: i'm following instructions on following page prestage cluster objects in ad domain services: https://technet.microsoft.com/en-us/library/dn466519.aspx

problem: instructions call creating ad objects using ad ds tools, installed remote server administration tools. however, don't see option create new objects (see screenshot below):

http://i.imgur.com/ijvsakh.png

notes:

- not have access domain controller. however, have access domain user account. however, domain user account cannot rdp of vms on cluster going configured.

summary: how can create new ad objects in non-domain-controller machine?

domain user account privileges not enough privileges create cno.  note required privileges listed in article referenced.

if ou exists want use, membership in account operators group minimum required complete step. if need create ou cluster objects, membership in domain admins group, or equivalent, minimum required complete step.

---

. : | : . : | : . tim

Windows Server  >  High Availability (Clustering)