We help IT Professionals succeed at work.

Join imac to win ser 2012 domain

bandar m
bandar m asked
on
How can join mac to domain win ser 2012 and log in using that domain
Comment
Watch Question

Cloud Architect
Commented:
In major steps it can be done like this:

- In AD: First pre-create the Mac OS X items in AD (pre-staging)

- On Mac: Open System Preferences --> Users & Groups
   - Click the lock in the lower left and authenticate.
   - Click Login Options
   - Click on the “Join…” button
- Click “Open Directory Utility…”
- Click the lock button again.
- Double click “Active Directory”.
-  Type your FQDN in Domain field and type the name of the prestaged object in first step for computer name.
- Now click Show advanced Options.
- The only thing to select here (unless you choose otherwise) is  “Force local home directory on startup disk”
- Now Click Bind. You'll get prompted for your domain credentials, as well as a path for where your object is located. (eg: "CN=Computers,DC=some,DC=domain,DC=com”.
- Since you prestaged the object, you'll receive a question to join an existing account. Click OK.
- Click OK a few times or close remaining windows, you now should be connected to the Windows Domain.

Author

Commented:
Is  prestage required or not

Author

Commented:
Also i need to log in to domain using imac and i can browse my website and others mail,...etc
Zephyr ICTCloud Architect

Commented:
Pre-staging is not really a requirement I think, but I have more success with doing it, also if you don't pre-stage you need to have the necessary rights to add your workstation to the AD. Also make sure DNS can resolve the Windows AD, or it will even fail with pre-staging

Also i need to log in to domain using imac and i can browse my website and others mail,...etc

I'm not entirely sure I understand the question, after joining the Windows domain you should still be able to do everything you could before, unless policies are in place that prohibit certain things.

Author

Commented:
After i join one iMac to domain and make restart to that iMac.
Now can any one login to domain and using safari to send email.etc

In Win7 when login i can using local or domain user but in iMac i do not know how change and logon domain   user
Zephyr ICTCloud Architect

Commented:
When you join the iMac to the domain all authenticated domain users should be able to log into the iMac yes, sending mail and using Safari is possible as long as nothing stops them from using it (user rights, policies, etc...).

Also, mail will not be configured automatically in most cases, so you should configure it per user that logs on. Here's a quick how-to for configuring Exchange mail.

Author

Commented:
How enable other user in mac

At the Mac OS X login screen, simply select Other from the user list

How enable that
After bind to win serv  domain

Author

Commented:
I've requested that this question be deleted for the following reason:

 
Zephyr ICTCloud Architect

Commented:
Did you try logging into the iMac with a domain account? Instead of picking it from a list...
You did not give a legitimate reason for the deletion.  It does appear that spravtek correctly answered you initial question and should really be assigned points.

As for your last question, that wasn't part of your initial question and you never responded to spravtek.  You generally don't want to pick user accounts from a list if you join a domain, since that's considered a security problem.  You have to go to the command line and populate the user accounts on the system.  If you have a lot of accounts, you should script it, but that's not best practices.  You mainly do this to set up a single mobile AD user on a Laptop.

After you've bound the system to AD, open terminal and run the following.
sudo /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n REMOTE_ACCOUNT_NAME