Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am attempting to setup an open directory authentication system for a small iMac laboratory.

The open directory authenticates network users properly and allows a login on the Mac system although the only way to make a network user an administrator is to select the account via System Preferences and check the "Allow user to administer this Mac" checkbox.

Is there an easier implementation that allows a user/group on the open directory to administer all of the macs connected to the directory?

share|improve this question
up vote 2 down vote accepted

Yes, you can nest/add the OD group (e.g. workgroup) to which the networked users belong to the admin group in the local directory of the Macs. Something like this should do it (you could issue this to the client Macs using ARD, or include this in a configuration script applied with something like munki or DeployStudio):

dseditgroup -o edit -u localadmin -P <password> -a workgroup -t group admin
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.