How to do it...

Carry out the following steps to configure the DKM:

1. Login as domain administrator on your domain controller (for example, W2k16-DC) or use the ADSI Edit console from the administrator desktop if you have installed RSAT.
2. Type adsiedit.msc in the Run window.
3. When the ADSI Edit window opens, right-click on ADSI Edit and select Connect to.
4. Click on Select a well known Naming Context and select Default naming context.
5. Click on OK and expand Default naming context, as shown in the following screenshot:

1. Expand DC=rllab,DC=com.
2. Right-click on DC=rllab,DC=com and select New, and then select Object.
3. Select container and click on Next, as shown here:

1. In the Value textbox, type VMMDKM and click on Next.
2. Click on Finish and close the ADSI Edit window.
3. In the Active Directory Users and Computers window, in the top menu, click on View and then select Advanced Features.

1. Right-click on the VMMDKM container and click on Properties.
2. Click on the Security tab and click on Add.
3. Type the name of the VMM Administrators group: rllab\vmm-admins.
4. Check the Read, Write, and Create all child objects options.
5. Click on Advanced.
6. Select VMM Admins and click on Edit.
7. In the Apply to drop-down menu, select This object and all descendant objects.
8. Click on OK.