Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Set active directory groups as administrators

We have our macs bound to active directory and this is how our students log into them.


I can manually add active directory groups as administrators, however I am trying to find a unix command I can send to do this through ARD


I have found this on the apple website


dseditgroup -o edit -n /Local/Default -u localadmin -p -a networkuser -t user admin


we have an ad group called supportgroup, we want this to be admins on the macs.


Trying it with ARD there doesn't seem to be a way to include the local admin account password in the command so it fails due to lack of authentication. However trying it on the actual mac itself doesn't even seem to work, when i do this


dseditgroup -o edit -n /Local/Default -u technical -p -a mydomain\supportgroup -t user admin


I thought this might because this will only do users and not groups, so i tried it with a single (AD) user account and this wouldn't work either, keep getting the error message


Error locating specified node


So 2 questions


1. Is there a way to include local admin password in the command so this can be done by ARD


2. Am I doing this command wrong?


Hope someone can help

Posted on Jan 22, 2013 8:18 AM

Reply
2 replies

Set active directory groups as administrators

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.