Re: [Fed-Talk] NetBoot with Active Directory Accounts

• Subject: Re: [Fed-Talk] NetBoot with Active Directory Accounts
• From: "Simon, Gary" <email@hidden>
• Date: Thu, 9 Oct 2008 12:02:09 -0600
• Accept-language: en-US
• Acceptlanguage: en-US
• Delivered-to: email@hidden
• Delivered-to: email@hidden
• Thread-index: AckqMBKrmXOxeGh9QtyN7injF5X7BgACRL+8
• Thread-topic: [Fed-Talk] NetBoot with Active Directory Accounts

On Oct 9, 2008, at 9:46 AM, Simon, Gary wrote:

> Has anyone tried to configure a NetBoot image so that it could use
> Active Directory accounts?  I can’t seem to find any documentation
> on how this could be done.

The tricky thing here is the machine account.

Two options:

1. bind the machine and then image. Use dsconfigad to change the
password change time to something very very long. All machines will
use the same machine account. If any one of them changes it... all the
others will stop working.

2. Image the machine unbound. Have a launchd item to bind after boot.
Each machine uses it's own machine account. However, you'll probably
have a boatload of orphaned accounts after doing this for a while.
Plus on first boot you'll have a bit of a delay as the machine binds
to AD before the users can login. This might not be noticeable.

Joel

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/fed-talk/email@hidden

This email sent to email@hidden

• Follow-Ups:
  • Re: [Fed-Talk] NetBoot with Active Directory Accounts
    • From: Joel Rennich <email@hidden>

• Prev by Date: [Fed-Talk] launchctl list question; what is the Status column?
• Next by Date: Re: [Fed-Talk] NetBoot with Active Directory Accounts
• Previous by thread: Re: [Fed-Talk] NetBoot with Active Directory Accounts
• Next by thread: Re: [Fed-Talk] NetBoot with Active Directory Accounts
• Index(es):
  • Date
  • Thread