Solved

Local admins on macs from Open Directory

Posted on 2010-09-06
7
634 Views
Last Modified: 2012-05-10
Ok I have searched the net and is there really no easy way to make users a local administrators of their macs so they can install apps? I find it hard to believe its that hard. Please someone give me the run down.
0
Comment
Question by:cbielich
  • 4
  • 2
7 Comments
 
LVL 20

Expert Comment

by:woolnoir
ID: 33616291
There isnt really - if you have AD integration it becomes a lot easier as it allows AD-> ADMIN group mappings which can be controlled from the AD side, in addition anyone configured as a managed as the computer object in AD becomes a local admin.

for OD, you need to upgrade the local admin group on each mac....

1. Open WGM.
2. Select Server > View Directories
3. Make sure you are in fact in the Local directory, authenticate.
4. Select View > Show System Users and Groups
5. Select the "admin" Group
6. Click the "Upgrade Legacy Group" button.

then you can use WGM to add OD groups into the local admin group on each machine - there isnt a 'nice' way to do this that i know of. You could in theory make this change to a master image, and deploy the machines with the changes already made.
0
 
LVL 3

Accepted Solution

by:
brisquet earned 500 total points
ID: 33617477
I found this and it sounds like a winner:

You can do all this in Workgroup Manager on each client Mac:

1. Open WGM.
2. Select Server > View Directories
3. Make sure you are in fact in the Local directory, authenticate.
4. Select View > Show System Users and Groups
5. Select the "admin" Group
6. Click the "Upgrade Legacy Group" button.

Now you can use the "+" button to add any group, local and from Open Directory to the admin group.
Account Preferences will honor that and display the correct admin status for all users that inherit local admin rights this way (check the tooltip for the check box in Account Preferences).
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33621964
was this of any use cbielich  ?
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 1

Author Comment

by:cbielich
ID: 33622144
Let me give it a try
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33624233
Let me know how it goes
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33652321
Mmm didn't I post the same solution before the person you awarded the points to ?
0
 
LVL 1

Author Comment

by:cbielich
ID: 33653868
oh sorry I didnt scroll up high enough to notice yours, can I edit it?
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The /etc/authorization file in Mac OS X 10.x can be used to control access to the various panes of the System Preferences amongst other things. It’s used by some of us Mac Sys Admin’s to give Standard Users access to System Prefs panes that only adm…
Set up iPhone and iPad email signatures to always send in high-quality HTML with this step-by step guide.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now