Skip to content

Latest commit

 

History

History
101 lines (62 loc) · 4.01 KB

0-Setup-AdministrativeAccountAndPermission.md

File metadata and controls

101 lines (62 loc) · 4.01 KB

0-Setup-AdministrativeAccountAndPermission.ps1

This PowerShell script is used to verify pre-deployment requirements for the Payment Card Payment processing solution for PCI DSS enablement.

Description

This Powershell script automates the installation and verification of the PowerShell modules installation, and validates, or installs the administrative user of the solution.

This script MUST be run as Local Administrator with elevated prividges. Why I need to run as local administrator?

Running this script is not required, but installation will fail if the following conditions are NOT met.

Installed Modules needed:

  • AzureRM
  • AzureAD
  • MSOnline
  • AzureDiagnosticsAndLogAnalytics
  • SqlServer
  • Enable-AzureRMDiagnostics (Script)

Example 1 Installing required modules

.\0-Setup-AdministrativeAccountAndPermission.ps1 -installModules

This command will validate, and install missing required PowerShell modules to deploy the Payment Card Payment processing solution for PCI DSS enablement.

Example 2 Configuring your global admin

 .\0-Setup-AdministrativeAccountAndPermission.ps1 
-azureADDomainName contosowebstore.onmicrosoft.com
-tenantId XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
-subscriptionId XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
-configureGlobalAdmin

This command will deploy installed modules, and setup the solution on a new subscription. It will create a the user adminXX@contosowebstore.onmicrosoft.com with a randomly generated strong passwords (Minimum 15 characters, with Upper and Lower case letters, at least 1 number and 1 special character)

Required Parameters

-azureADDomainName

Specifies the ID of the Azure ctive Directory Domain. As defined by Get-ADDomain

-tenantId

Specifies the ID of a tenant. If you do not specify this parameter, the account is authenticated with the home tenant.

-subscriptionId

Specifies the ID of a subscription. If you do not specify this parameter, the account is authenticated with the home tenant.

-configureGlobalAdmin

Will attempt to create a administrator user that will be configured as a subscrption administrator. An Active Directory Administrator with global privileges is required to run the installation. The local administrator must be in the .onmicrosoft.com domain name to run this solution, this step will help create the correct administrator user.

-installModules

Installs and verifies all required modules. If any of the commands from the script fail, see the following reference linksfor assistance:

Toubleshooting your tenant administrator

The following debugging, and troublshooting efforts can help identify common issue.

Testing your username and passwords AzureRM run the following commands in PowerShell:

$cred = Get-Credential  
Login-AzureRmAccount -Credential $cred

To test Azure AD run the following commands in PowerShell:

$cred = Get-Credential  
Login-AzureAD -Credential $cred

Review the following documentation to test Enable AzureRM Diagnostics

Review the following documentation to test Azure Diagnostics and LogAnalytics

To test SQL Server PowerShell run the following commands in PowerShell:

 $Credential = Get-Credential   Connect-AzureAD -Credential $Credential   Get-Module -ListAvailable -Name Sqlps;