Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 7 down vote favorite
3

I would like to have my MacBook Pro authenticate against Active Directory running on Windows 2008. A couple of years ago I tried to set this up between OS X 10.4 and Windows 2003 but I wasn't successful. A detailed step-by-step guide and a list of gotchas around domain security policy would be great.

share|improve this question

2 Answers

up vote 8 down vote

I'd recommend starting with this guide on Apple's mailing list (credit to Gilbert Palau):

The crux is quoted here:

  1. Go to the Directory Utility ‐> /Applications/Utilities/
  2. Click the Advanced Settings Button ‐> Buttons should appear on the top
  3. Click Services
  4. Make sure you're authenticated to makes changes ‐> click the lock and login
  5. Double‐click the Active Directory
  6. type in your domain in "Active Directory Domain" ‐> ex. (mydomain.com) watch out if your domain ends with .local opposed to.com or .net, you need to disable bonjour if it ends with .local.
  7. click bind
  8. enter in username and password ‐> just the username NOT email@hidden or MYDOMAIN\User
  9. Click ok.

http://lists.apple.com/archives/augd/2007/Nov/msg00033.html

share|improve this answer
The great failure here is that this does authentication only, not authorization. Supposedly, if your AD administrators add the AD Services for Mac, then you can add the proper extensions to do machine authorization, although I have not seen it in action. I have purposely not added Macs to our Directory because of the lack of authorization. – Scott Pack May 27 '09 at 14:30
It can do authorization for local administration, but from memory it may be necessary to use the 'dsconfigad' command-line tool to specify which AD groups will gain local admin privs. – Froosh May 29 '09 at 6:19
up vote 4 down vote

Two great resources on joining OSX clients to Active Directory are:

The Apple white paper on how to do it: pdf

An Apple video presentation on best practices for OSX AD: seminar

Apple has an extensive list of white papers and the like for a whole range of topics - check it out at http://www.apple.com/business/resources/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.