Hundreds of iLO AD settings reference a single AD object ?

[Claire G]

Just wondering if there is any reason we couldn't configure all of our iLOs with the same LOM Object Distinguished Name ??

i.e - Create 1 single Active Directory object, and have all of our iLOs authenticate to that ??

I've tested it and it works, I'm just wondering whether anyone knows of any reason why this might be a bad idea ?

[pratap m keshava]

It might be a compromise if all of the iLO's point to single Object. But it shouldn't cause that much harm.

Usually many iLO's do authenticate to a single object. There will be different HP Roles which will control how users access iLO's. Hence it is the HP Roles which matter more than HP Objects in AD.