AD users in Snow Leopard with admin privileges

Question

I've just authenticated my first Apple machine onto the active directory infrastructure. Yay!

The only thing I'm having problems with is specifying that the AD user is an administrator, and able to make changes. I don't see any interface for that.

Is there an interface in the system by default, or do I have to download the Server Admin Tools?

Matt, do you mean making the user a local admin of the Mac, or a domain admin? — Sam Cogan, Dec 11 '09 at 16:29

score 1 · Answer 1 · answered Dec 11 '09 at 17:27

1

For the machine, Directory Services has moved from Utilities (Leopard) to System -> Core Services.

In here you can add specific users/AD groups to admin the machine.

answered Dec 11 '09 at 17:27

eric.s

429
1
3
12

score 1 · Accepted Answer · answered Dec 11 '09 at 18:51

1

There way to add directory users to the local administrators (or any other local group) of a machine:

Connect to localhost with Workgroup Manager
From the directory drop-down on the top-left, select "Local"
Select the group you want to operate on
Click the members tab of the group
Click the plus button to add a member
At the top of the slide-out list select your directory instead of the local directory
Drag the desired member or group in to the local group

answered Dec 11 '09 at 18:51

Kamil Kisiel

11,946
7
46
68

Oh man, I'm so close. I want to make my domain user an administrator, but none of the built-in groups are showing up. Any tips? – Matt Simmons Dec 11 '09 at 20:06
Got it. Need to go to "View", then "System Users" or something very close to that – Matt Simmons Dec 11 '09 at 20:38

score 0 · Answer 3 · answered Dec 11 '09 at 18:34

0

In Leopard, at least, you can only specify groups with local administrative privileges. You can specify "ManagedBy" attributes in AD if you want to enable admin access for particular users.

answered Dec 11 '09 at 18:34

larsks

41,276
13
117
170

AD users in Snow Leopard with admin privileges

3 Answers3