2 Replies Latest reply: Jan 22, 2013 9:02 AM by JonnyFGM
JonnyFGM Level 1 Level 1 (0 points)

We have our macs bound to active directory and this is how our students log into them.

 

I can manually add active directory groups as administrators, however I am trying to find a unix command I can send to do this through ARD

 

I have found this on the apple website

 

dseditgroup -o edit -n /Local/Default -u localadmin -p -a networkuser -t user admin

 

we have an ad group called supportgroup, we want this to be admins on the macs.

 

Trying it with ARD there doesn't seem to be a way to include the local admin account password in the command so it fails due to lack of authentication. However trying it on the actual mac itself doesn't even seem to work, when i do this

 

dseditgroup -o edit -n /Local/Default -u technical -p -a mydomain\supportgroup -t user admin

 

I thought this might because this will only do users and not groups, so i tried it with a single (AD) user account and this wouldn't work either, keep getting the error message

 

Error locating specified node

 

So 2 questions

 

1. Is there a way to include local admin password in the command so this can be done by ARD

 

2. Am I doing this command wrong?

 

Hope someone can help