As Microsoft describes on TechNet you can prevent other OfficeWebAppsHosts from joining your Farm when the computer account isn’t located in the correct active directory OU.
http://technet.microsoft.com/library/jj219442.aspx
| FarmOU | Optional | System.String | Specifies the name of the Active Directory organizational unit (OU) that servers must be a member of to join the Office Web Apps Server farm. Use this parameter to prevent unauthorized servers (that is, servers that are not in the OU) from joining an Office Web Apps Server farm. |
But how to apply this setting? As using the DN of the OU does not work you need to use the Canonical Name of the OU. If your machines are located in CONTOSO.COM/Computers/OfficeServer/SERVERNAME1 you need to use the following command:
Set-OfficeWebAppsFarm -FarmOU “Computers/OfficeServer”
To check the setting:
Get-OfficeWebAppsFarm
FarmOU should display the ldap path of the OU.
FarmOU : ldap://OU=OfficeServer,OU=Computers
Recent Comments