asked on

Local admins on macs from Open Directory

Ok I have searched the net and is there really no easy way to make users a local administrators of their macs so they can install apps? I find it hard to believe its that hard. Please someone give me the run down.

Adrian Cantrill

There isnt really - if you have AD integration it becomes a lot easier as it allows AD-> ADMIN group mappings which can be controlled from the AD side, in addition anyone configured as a managed as the computer object in AD becomes a local admin.

for OD, you need to upgrade the local admin group on each mac....

1. Open WGM.
2. Select Server > View Directories
3. Make sure you are in fact in the Local directory, authenticate.
4. Select View > Show System Users and Groups
5. Select the "admin" Group
6. Click the "Upgrade Legacy Group" button.

then you can use WGM to add OD groups into the local admin group on each machine - there isnt a 'nice' way to do this that i know of. You could in theory make this change to a master image, and deploy the machines with the changes already made.

ASKER CERTIFIED SOLUTION