AD users in Snow Leopard with admin privileges

Question

I've just authenticated my first Apple machine onto the active directory infrastructure. Yay!

The only thing I'm having problems with is specifying that the AD user is an administrator, and able to make changes. I don't see any interface for that.

Is there an interface in the system by default, or do I have to download the Server Admin Tools?

Answer 1

There way to add directory users to the local administrators (or any other local group) of a machine:

1. Connect to localhost with Workgroup Manager

2. From the directory drop-down on the top-left, select "Local"

3. Select the group you want to operate on

4. Click the members tab of the group

5. Click the plus button to add a member

6. At the top of the slide-out list select your directory instead of the local directory

7. Drag the desired member or group in to the local group

Answer 2

For the machine, Directory Services has moved from Utilities (Leopard) to System -> Core Services.

In here you can add specific users/AD groups to admin the machine.

Answer 3

In Leopard, at least, you can only specify groups with local administrative privileges. You can specify "ManagedBy" attributes in AD if you want to enable admin access for particular users.