Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Active Directory Allow administration by

I checked with our Network manager. He indicated that the managed by
setting is not a viable option. We're looking at several thousand users and
according to our Network manager he would have to put in the Distinguished
Names of each user. The snap-in doesn't allow for groups. Plus, that would
give the users the ability to unbind the computer's if they wanted to.
Binding and unbinding is something only the IT staff has access to do.

> From: Michael Bartosh <email@hidden>
> Date: Mon, 26 Jul 2004 11:32:56 -0600
> To: Brett Decarion <email@hidden>
> Cc: Mac Lab Manager Listserve <email@hidden>
> Subject: Re: Active Directory Allow administration by
>
>
> On Jul 26, 2004, at 10:01 AM, Brett Decarion wrote:
>
>> Where do I set the 'managed by' attribute?
>
> Using Windows. Using Active Directory Users and Computers.
>
>> Is this the 'Allow
>> administration by' checkbox in the advanced options for Directory
>> Access?
>
> No. That is a different feature.
>
>> If so I already have that checked with the entry "DELTA\domain
>> users,DELTA\domain admins,DELTA\enterprise admins" and everyone is a
>> 'domain
>> user.'
>
>
> Again, a) you can only belong to 16 groups, b) it takes awhile for the
> Mac to cache all the groups. You can monitor this caching by turning on
> debugging for the DirectoryService daemon.
>
> http://www.4am-media.com
> Mac OS X Consulting and Training
> Michael Bartosh
> email@hidden
> 303.517.0272
> Denver, CO
>
>
> "The surest way to corrupt a youth is to instruct him to hold in higher
> regard those who think alike than those who think differently."
>
> - -- Nietzsche
_______________________________________________
maclabmanager mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/maclabmanager
Do not post admin requests to the list. They will be ignored.

References: 
 >Re: Active Directory Allow administration by (From: Michael Bartosh <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.