Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've just authenticated my first Apple machine onto the active directory infrastructure. Yay!

The only thing I'm having problems with is specifying that the AD user is an administrator, and able to make changes. I don't see any interface for that.

Is there an interface in the system by default, or do I have to download the Server Admin Tools?

share|improve this question
    
Matt, do you mean making the user a local admin of the Mac, or a domain admin? –  Sam Dec 11 '09 at 16:29
    
Local admin on the machine –  Matt Simmons Dec 11 '09 at 17:49
add comment

3 Answers

up vote 1 down vote accepted

There way to add directory users to the local administrators (or any other local group) of a machine:

  1. Connect to localhost with Workgroup Manager

  2. From the directory drop-down on the top-left, select "Local"

  3. Select the group you want to operate on

  4. Click the members tab of the group

  5. Click the plus button to add a member

  6. At the top of the slide-out list select your directory instead of the local directory

  7. Drag the desired member or group in to the local group

share|improve this answer
    
Oh man, I'm so close. I want to make my domain user an administrator, but none of the built-in groups are showing up. Any tips? –  Matt Simmons Dec 11 '09 at 20:06
    
Got it. Need to go to "View", then "System Users" or something very close to that –  Matt Simmons Dec 11 '09 at 20:38
add comment

For the machine, Directory Services has moved from Utilities (Leopard) to System -> Core Services.

In here you can add specific users/AD groups to admin the machine.

share|improve this answer
add comment

In Leopard, at least, you can only specify groups with local administrative privileges. You can specify "ManagedBy" attributes in AD if you want to enable admin access for particular users.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.