Mobile accounts as local admins

dtmf,

On the client machine go to Systems Preferences > Accounts highlight the Mobile User you want to be a local admin and place a checkmark on Allow user to administer this computer.

Hope this helps,

Boddie

dtmf,

I do not know if you can do this from workgroup manager, but if you could, I would think that would be a security issue. Any mobile user that logs into the network from someone else's computer would then have administrator privileges to that machine.

Boddie

this has to be done locally with either dscl or dseditgroup. here's an example using dseditgroup:

/usr/sbin/dseditgroup -o edit -a shortname -t user admin

replace shortname with the shortname of the user in question.

dscl syntax is:

dscl . -append /groups/admin GroupMembership shortname

then you must have done something differently. post your exact steps, and maybe i can help.

this works every time for all my clients who need local admin mobile accounts.

If Mobile accounts aren't working? (Specifically mobile.)

That eventuality is why I usually set up a local administrative user, though.

That's established via ARD or via direct server access.

(Haven't checked to see if there's a shell script to add a user, but that's worth looking for or writing given the numbers of systems you're discussing.)

The local admin is the backdoor should OD connections fail, too.