Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've just authenticated my first Apple machine onto the active directory infrastructure. Yay!

The only thing I'm having problems with is specifying that the AD user is an administrator, and able to make changes. I don't see any interface for that.

Is there an interface in the system by default, or do I have to download the Server Admin Tools?

share|improve this question
Matt, do you mean making the user a local admin of the Mac, or a domain admin? – Sam Dec 11 '09 at 16:29
Local admin on the machine – Matt Simmons Dec 11 '09 at 17:49
up vote 1 down vote accepted

There way to add directory users to the local administrators (or any other local group) of a machine:

  1. Connect to localhost with Workgroup Manager

  2. From the directory drop-down on the top-left, select "Local"

  3. Select the group you want to operate on

  4. Click the members tab of the group

  5. Click the plus button to add a member

  6. At the top of the slide-out list select your directory instead of the local directory

  7. Drag the desired member or group in to the local group

share|improve this answer
Oh man, I'm so close. I want to make my domain user an administrator, but none of the built-in groups are showing up. Any tips? – Matt Simmons Dec 11 '09 at 20:06
Got it. Need to go to "View", then "System Users" or something very close to that – Matt Simmons Dec 11 '09 at 20:38

For the machine, Directory Services has moved from Utilities (Leopard) to System -> Core Services.

In here you can add specific users/AD groups to admin the machine.

share|improve this answer

In Leopard, at least, you can only specify groups with local administrative privileges. You can specify "ManagedBy" attributes in AD if you want to enable admin access for particular users.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.