Link to home
Start Free TrialLog in
Avatar of Leonard7881
Leonard7881

asked on

Domain User admin rights on MAC

Hello all,

We have three MACs which are joined to the domain. The domain users group has been given local administrator rights but when they login they cant install software or make changes as they need to. Also, they are unable to browse other users folders.
 
Here is what i have done:
Under:
Directory Access
  -AD
  -Advanced options
Allow Administration by:
  -domain admins
  -enterprise admin
  -domain users

Shouldnt the domain users that logon have administrative privileges on the MAC?
Avatar of GarbsTheTurtle
GarbsTheTurtle
Flag of United States of America image

You should use DOMAIN\<group>, instead of just <group> in Allow Administration by. Try changing those values and try again.

From Terminal - this will make things go a little quicker:
sudo dsconfigad -groups "DOMAIN\Domain Admins","DOMAIN\Enterprise Admins","DOMAIN\Domain Users"
Avatar of Leonard7881
Leonard7881

ASKER

Thats how i have it set:
domain\domain users

Yet the domain users cant install or make system changes but i can as an admin.

Thanks

C
ASKER CERTIFIED SOLUTION
Avatar of GarbsTheTurtle
GarbsTheTurtle
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks Nikon!