• Contact
  • Cookie Policy
Techspark Blogging about technical stuff

Secure OfficeWebApps Farm with “FarmOU” Setting

August 23, 2013 3:19 PM / 4 Comments / XeroX

As Microsoft describes on TechNet you can prevent other OfficeWebAppsHosts from joining your Farm when the computer account isn’t located in the correct active directory OU.

http://technet.microsoft.com/library/jj219442.aspx

FarmOU Optional System.String Specifies the name of the Active Directory organizational unit (OU) that servers must be a member of to join the Office Web Apps Server farm. Use this parameter to prevent unauthorized servers (that is, servers that are not in the OU) from joining an Office Web Apps Server farm.

But how to apply this setting? As using the DN of the OU does not work you need to use the Canonical Name of the OU. If your machines are located in CONTOSO.COM/Computers/OfficeServer/SERVERNAME1 you need to use the following command:

Set-OfficeWebAppsFarm -FarmOU “Computers/OfficeServer”

To check the setting:

Get-OfficeWebAppsFarm

FarmOU should display the ldap path of the OU.

FarmOU                            : ldap://OU=OfficeServer,OU=Computers

 

Posted in: OfficeWebApps, SharePoint / Tagged: Active Directory, Office Web Apps

4 Thoughts on “Secure OfficeWebApps Farm with “FarmOU” Setting”

  1. Dave on November 16, 2013 at 6:26 AM said:

    This doesn’t work for me either. I created an OU at the root called OWAServers and the OWA servers are in this OU. I get the following exception, “..The FarmOU may be formatted incorrectly.” when I use the following cmdlet Set-OfficeWebAppsFarm -FarmOU “OWAServers”.

    Reply↓
    • XeroX on November 16, 2013 at 11:08 AM said:

      Are your account and computer object in the same domain?

      Or try Set-OfficeWebAppsFarm -FarmOU “OWAServers/”

      Reply↓
  2. Pat Richard (Lync MVP) on August 28, 2014 at 2:27 PM said:

    Awesome. I’ve been trying to set this on several, using the DN of the OU, and kept getting the
    “Set-OfficeWebAppsFarm : Office Web Apps encountered an error while checking to see if this machine is a member of the FarmOU. The FarmOU may be formatted incorrectly.”

    Thanks for this little nugget as supplying just the Canonical Name of the OU, I was able to get it set.

    BTW – While working through this issue, I read http://www.wictorwilen.se/office-web-apps-2013-securing-your-wac-farm which says that the OU should be a top level OU. Interesting.

    Reply↓
    • XeroX on August 28, 2014 at 4:18 PM said:

      Obviously he doesn’t know the correct syntax how to use Sub OUs of active directory. I don’t know why there is no proper documentation of microsoft, but it works and its intented to work like this.

      Glad that this fixes you issue.

      Cheers

      Reply↓

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Post Navigation

 
Next Post →

Recent Posts

  • open-vm-tools: Unknown ioctl 1976
  • Synology Virtual Machine Manager increase vDisk Limit
  • Error while trying to Access “Details” of a SharePoint App
  • Reinstall WSUS and keep downloaded content
  • SSLLabs A+ rating with nginx without breaking compatibility

Recent Comments

  • SLATES361 on open-vm-tools: Unknown ioctl 1976
  • sysadmin on JBOD with HP Smart Array P410i
  • XeroX on Display ESXi health status of Dell Perc 5/i
  • brendan on Display ESXi health status of Dell Perc 5/i
  • XeroX on Office Web Apps 2013 Management Pack for Operations Manager 2012 (R2)

Archives

  • November 2020
  • November 2015
  • June 2015
  • February 2015
  • August 2014
  • June 2014
  • February 2014
  • January 2014
  • November 2013
  • September 2013
  • August 2013

Categories

  • ESXi
  • FreeBSD
  • Hardware
  • Hyper-V
  • iOS
  • Microsoft
  • OfficeWebApps
  • Operations Manager
  • SharePoint
  • Synology
  • vCenter
  • VMWare
  • Webserver
  • Windows Server
© Copyright 2021 - Techspark
Infinity Theme by DesignCoral / WordPress
This website uses Cookies and Matomo to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Reject Opt-Out
Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled

Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.

Non-necessary

Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.