You cannot only join further UCS servers to an existing UCS domain but also various clients. After the join you can manage and configure these clients easily via the Univention Management Console from anywhere you are. Among those administrative tasks are, for example, the installation of software, the monitoring and controlling of services, and the network configuration.

In this article and in the video below I will show you in detail how easy that is.

You are currently viewing a placeholder content from Youtube. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.

More Information

Active Directory-compatible Domain Controller

First of all, we install the application Active Directory-compatible Domain Controller, which we require to enable the domain join. You can download this app for free from the Univention App Center.

The App Center can be found in the software module of the UMC.

Screenshot UMC with App Center

After the installation of the “Active Directory-compatible Domain Controller” we change to the Windows client, which shall join the UCS domain.

Adjust networks settings

To guarantee a successful domain join, you first have to configure the IP address of the UCS domain controller as DNS server within the network setting of the Windows client.

You find the network settings very easily via the net symbol in your task bar

Windows task bar

or open the network and release center via “System settings” > “Network and Internet” > “Network and release center” and click on “Change adapter settings”.

Windows adapter settings 1

Via the properties of your LAN or WLAN connection insert now the appropriate IP of your UCS domain controller as the DNS server and save it.

Windows adapter settings 2

Adjust domain settings

To start the domain join it is required to register the Windows client as member of your UCS domain via the system settings.

You therefore navigate to the settings of your system. The easiest way to do that is to open the start menu and select “Computer”, “Properties” with a right mouse click. In that window you click on “Change settings”.

Windows system settings 1

Now you have to indicate the domain of your UCS system as the domain for the Windows client.

Windows system settings 2

The name of your domain can be seen on the top right in the UMC.

UMC domain name

After click on OK or Accept you are then asked to authenticate with the administrator account of the domain to confirm the domain join.

After a short while a new window opens up that verifies the successful join to the UCS domain. The client has to be restarted then.

When the client has been booted successfully, you can log in to the Windows system with a domain user of your choice.

This was our short introduction on the topic of joining a Windows client to a UCS domain. The next video will deal with the topic of Active Directory connection.

Use UCS Core Edition for Free!
Download now


  1. William

    July 14, 2016 at 08:31

    I have a question on DHCP, how does it work seamlessly on UCS? If a windows client is configured to join the domain (fqdn) and explicitly putting the ip address of the UCS in the proffered dns. Does it also automatically get an ip address? Thank you.

  2. john

    July 7, 2018 at 06:40

    thanks so much
    I like it

  3. Ade

    September 8, 2019 at 08:23

    is it posible to join domain when ucs installed on aws?

    1. Michael Grandjean

      September 9, 2019 at 10:28

      Hi Ade,

      this depends on your AWS environment 🙂 Regarding the UCS feature set, the UCS EC2 instances are not any different from the on-premise installations, so joining a Windows machine is technically possible.

      I can think of two scenarios:

      a) A Windows server at AWS in the same subnet: This should just work as described in this blog article.
      b) A Windows client at your on-premise network and a UCS VM at AWS. Usually you don’t want to expose all the necessary ports to the Internet, so you need some kind of VPN to connect your on-premise network to your AWS VPC. If the routing and tunneling is done right, a join should absolutely be possible.

      Best regards,
      Michael Grandjean

  4. Matthias

    October 16, 2020 at 22:22


    is it possible to delegate the permission to join clients.
    So, for example, having a user that can join clients, without having other administrative privileges?

    In the UCS Manual also the “Administrator” is required.

    I tried different groups and policies in UCS but have not found a working solution yet.

  5. Timo Hollwedel

    Timo Hollwedel

    October 21, 2020 at 14:10

    Hello Matthias,
    in a default UCS domain joining requires LDAP write permissions. By giving a user these permissions you would also grant access to giving himself other administrative privileges, which defeats what you are trying to do. For reference:

    However, it is possible to delegate the right to join windows clients without having full domain admin privileges if you are using a Samba 4 / Active Directory domain. We have a guide available here:

    Best regard,
    Timo Hollwedel


Leave a Reply

Your email address will not be published. Required fields are marked *