So... I'm writing some cloud formation templates.
Using cfn-init, I get the machine to join the domain, and now I need to run in a Domain Admin context as local admin with elevated privilege to:
- Add a domain service account with log on as a service right
- Set that account as SQL server service account
- Set appropriate disk permission
However it seems cfn-init powershell are executed as System account, and that it can't spawn other PowerShell process or something?
Any one have any ideas?