MAC OS ACTIVE DIRECTORY TRAINING MAC OS X
MAC OS ACTIVE DIRECTORY TRAINING WINDOWS

For instance, if the user Zoey wanted to log into the 4sysops.local AD domain, then she could use the following forms for her For Further Study ^ Users can employ any of the standard username conventions supported by Active Directory.

MAC OS ACTIVE DIRECTORY TRAINING MAC OS X

Now it’s time to log in! At the Mac OS X login screen, simply select Other from the user list (this assumes that the computer is configured in this way you can make these changes in the Accounts Preferences Pane). The window shows both graphically, by virtue of the colored circle icon, and in text the status of the binding.Ģ. You can verify that the Mac is successfully bound to the AD domain by reviewing the Directory Servers tab in Directory Utility. In the following screen capture, we are placing the host Macbox in the default Computers container in AD.ġ.

Verify also the location in AD where you want the Mac computer created. When you click Bind in Directory Utility you are prompted for Active Directory credentials with privilege to add computers to the domain. Also, and this is important in most implementations, we can assign the Active Directory global groups that are allowed administrative access to the Mac workstation.ħ. Finally, the Administrative panel allows us to specify a preferred Active Directory domain controller. The Mappings panel enables us to optionally bind three key UNIX (and, by extension, Mac OS X) attributes to associated Active Directory schema attributes.Ħ. In my experience, mobile accounts are necessary only when you manage Mac OS X laptop computers and need your users to be able to log in from work and from off-campus locations.ĥ. The most important choice in the User Experience panel is deciding whether or not you need to create a mobile account at the user’s first domain login.

Computer ID: This is the DNS hostname of the workstationīefore you click Bind, let’s click the Show Advanced Options disclosure triangle to review some of the advanced binding options.Ĥ.

Active Directory Domain: Use the DNS name of the domain, not the NetBIOS short name.

At the very least, the two pieces of information that are required in order to join a Mac workstation to Active Directory are: At this point we really get down to business. Next, select Enable for the Active Directory plug-in. In Directory Utility, navigate to the Services tab. Okay, now we are on the same page regardless of our recent version of Mac OS X. Then, next to Network Account Server:, click Edit….Ģ. In the Accounts prefpane, click Login Options.

To open Directory Utility on Snow Leopard, open System Preferences and then click Accounts from the System row. Unfortunately, in Mac OS X 10.6 Snow Leopard, the same procedure is a little more cumbersome (the pane is not searchable via Spotlight, for instance). The above single step is all that’s required to open Directory Utility on Leopard. Believe me, the renaming of Directory Access to Directory Utility in Leopard has caused many Mac administrators headaches! NOTE: In Mac OS X Tiger and earlier, this utility is named Directory Access. In Mac OS X 10.5 Leopard, run a Spotlight search for Directory and click Directory Utility. The following procedure is essentially identical between Mac OS X Leopard and Mac OS X Snow Leopard systems where there is a difference, I will note it.ġ. Without any further ado, let’s turn our attention to the specific steps required to accomplish our chosen task. Add a Mac OS X computer to Active Directory ^

MAC OS ACTIVE DIRECTORY TRAINING WINDOWS

Of course, a properly configured Windows Dynamic Host Configuration Protocol (DHCP) server will assign your Mac workstations a correct IP address, subnet mask, and preferred DNS server address.įinally, and this should come as no surprise to Windows server administrators, you will need to perform the domain join either as a domain administrator, or as a user account that has been delegated the privilege to join workstations to the domain.

You can specify a DNS hostname for your Mac either by using Terminal or by using the Sharing Preference Pane. This means, in a nutshell, that our Macs have: Before attempting a domain join from a Mac computer, we need to make sure that we have our server- and client-side networking correctly configured.

Mac os active directory training