Hello, Below are the set of commands you need to follow to integrate IC and SRX. You can also look at KB 14346 which also shares the below information. Feel free to open case with JTAC if you are looking for more information and details. set services unified-access-control infranet-controller dev106vm26 address <Ip Address> set services unified-access-control infranet-controller dev106vm26 interface ge-0/0/0.0 set services unified-access-control infranet-controller dev106vm26 password "$9$yvGeWxbwgZDk24ZjkqzFCtuO1h7Nb" Apply uac enforcement in security policy: set security policies from-zone untrust to-zone trust policy pol1 match source-address any set security policies from-zone untrust to-zone trust policy pol1 match destination-address any set security policies from-zone untrust to-zone trust policy pol1 match application any set security policies from-zone untrust to-zone trust policy pol1 then permit application-services uac-policy To Monitor the status : show services unified-access-control status Thanks Sumit JTAC ... View more

Can you paste the screenshot of the privilages of user by which you are trying to Add AD on IC and open a JTAC case. ... View more

Hi, If you have used Domain Admin credentials and it has not worked, can you please confirm that your IC is on 3.1 as you have mentioned in original post ? Can you restart the IC services, try joining the domain again with the valid "Admin credentials". If it does not work, feel free to open a JTAC case. Thanks Sumit ... View more

Hi, You can also check user access for Modify permissions on AD: In the Access Control Settings for Computers dialog box, click Add. In the Select User, Computer click or manually enter the name of the user to whom you want to grant permissions to perform AD operations on behalf of the IC. In the Permission Entry for Computers dialog box, click Computer objects in the Apply onto list. In the Permissions list, find the Reset Password permissions, click to select the Allow check box next to the permission, and then click OK. In the Permissions list, find the ñModify Permissionsî permissions, click to select the Allow check box next to the permission, and then click OK. ... View more

Hi, Was it working earlier ? The error indicates soem permissions issue. Can you tell whether you are using a full Admin account or some limited Admin account. You can also check the permissions of the user from AD.You can use the below steps to check the user permissions. From the Active Directory Users and Computers snap-in, click Advanced Features on the View menu so that the Security tab is exposed when you click Properties. Right-click the Computers container and then click Properties. On the Security tab, click Advanced. On the Permissions tab, click Add and add created user to the list of permission entries. Make sure the "This object and all child objects" option is displayed in the Apply onto box. From the Permissions box, click to select the Allow check box next to the "Create Computer Objects" and "Delete Computer Objects" and then click OK. Use the above verified user in AD/NT configuration on IC. You can also take a policy trace to check the issue. Let us know how it went. Thanks Sumit ... View more