Solved

Local admins on macs from Open Directory

Posted on 2010-09-06
7
643 Views
Last Modified: 2012-05-10
Ok I have searched the net and is there really no easy way to make users a local administrators of their macs so they can install apps? I find it hard to believe its that hard. Please someone give me the run down.
0
Comment
Question by:cbielich
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 20

Expert Comment

by:woolnoir
ID: 33616291
There isnt really - if you have AD integration it becomes a lot easier as it allows AD-> ADMIN group mappings which can be controlled from the AD side, in addition anyone configured as a managed as the computer object in AD becomes a local admin.

for OD, you need to upgrade the local admin group on each mac....

1. Open WGM.
2. Select Server > View Directories
3. Make sure you are in fact in the Local directory, authenticate.
4. Select View > Show System Users and Groups
5. Select the "admin" Group
6. Click the "Upgrade Legacy Group" button.

then you can use WGM to add OD groups into the local admin group on each machine - there isnt a 'nice' way to do this that i know of. You could in theory make this change to a master image, and deploy the machines with the changes already made.
0
 
LVL 3

Accepted Solution

by:
brisquet earned 500 total points
ID: 33617477
I found this and it sounds like a winner:

You can do all this in Workgroup Manager on each client Mac:

1. Open WGM.
2. Select Server > View Directories
3. Make sure you are in fact in the Local directory, authenticate.
4. Select View > Show System Users and Groups
5. Select the "admin" Group
6. Click the "Upgrade Legacy Group" button.

Now you can use the "+" button to add any group, local and from Open Directory to the admin group.
Account Preferences will honor that and display the correct admin status for all users that inherit local admin rights this way (check the tooltip for the check box in Account Preferences).
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33621964
was this of any use cbielich  ?
0
Plug and play, no additional software required!

The ATEN UE3310 USB3.1 Gen1 Extender Cable allows users to extend the distance between the computer and USB devices up to 10 m (33 ft). The UE3310 is a high-quality, cost-effective solution for professional environments such as hospitals, factories and business facilities.

 
LVL 1

Author Comment

by:cbielich
ID: 33622144
Let me give it a try
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33624233
Let me know how it goes
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 33652321
Mmm didn't I post the same solution before the person you awarded the points to ?
0
 
LVL 1

Author Comment

by:cbielich
ID: 33653868
oh sorry I didnt scroll up high enough to notice yours, can I edit it?
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question