LCM account now requires full control, but the pre deployment script does not grant it

We just recently started an Azure Local deployment and during validation, the LCM creates the CNO, but fails to apply the permissions granting the CNO full control over the lcm account. This happens as part of this script: C:\NugetStore\Microsoft.AS.Infra.Security.Domain.10.2604.0.42\content\Deployment\Domain.psm1

Unfortunately, the LCM doesn't have full control over the OU to be able to grant it to the CNO. The predeployment script only grants the lcm limited permissions: https://github.com/Azure/AzureStack-Tools/blob/8fd59ad7bb82b4bf485a05073d16d416e01c8593/HCI/AsHciADArtifactsPreCreationTool.psm1#L614

I'd offer a pull request, but the Contribution guidelines link doesn't work. Also, pull requests seem pretty stale.

从引用行中的 HCI/AsHciADArtifactsPreCreationTool.psm1 开始，然后检查部署包中的 Domain.psm1 脚本，以追踪权限的应用方式。重现或检查 Azure Local 部署验证，并确认 LCM 可以授予 CNO 对 lcm 帐户和 OU 的完全控制权限。

由索引模型根据 Issue 内容生成。