Re: Clients getting passed the correct AD permissions

Subject: Re: Clients getting passed the correct AD permissions
From: Aaron Rosenblum <email@hidden>
Date: Tue, 20 May 2008 21:56:11 -0400
Delivered-to: email@hidden
Delivered-to: email@hidden

The default behavior is that they are a non-admin user and cannot modify system settings even if they are in an "Admin" group in the domain. You can modify this behavior, however. Using the Directory Utility (Directory Access on 10.4) check a box that allows you to designate groups or users in your domain that will be treated as local admins. So yes, this must be done locally on the OSX client, but you can do it using the command line, so it (as well as binding the workstation) can be scripted.

Aaron

On May 20, 2008, at 11:25 AM, dboyer wrote:

Hello all, my question is regarding clients pulling correct permission when authenticated against AD. If a person that is supposed to have ADMIN rights to the system (make system changes, etc..) will 10.4 - 10.5 know this correctly? What is the best way to make this happen?
Best
Dave
--------------------------------------------------------------------------------
David Boyer
Macintosh Systems Administrator
Kutztown University
PO Box 730
Kutztown, PA 19530
Attn: David Boyer
Information Technology
Admin Bldg 112
email= email@hidden
610-683-4663
---------------------------------------------------------------------------------
IMPORTANT/CONFIDENTIAL: This communication is intended solely for the use of the individual or entity to which it is addressed. This e-mail contains information from Kutztown University of PA that may be privileged, confidential, and exempt from disclosure under applicable law. If the reader of this communication is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately and permanently delete this message including all attachments.
Thank you.
<David Boyer.vcf>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden



References:  
  >Clients getting passed the correct AD permissions (From: dboyer <email@hidden>)




Prev by Date:
IBM Informix Dynamic Server v11.5 for Mac OS X Server

Next by Date:
Re: Office 2008 and Network Home Folders

Previous by thread:
Re: Clients getting passed the correct AD permissions

Next by thread:
Using dtrace to trouble-shoot slapconfig problems

Index(es):

Date
Thread













  
   Home
   Archives
   Terms/Conditions
   Contact
   RSS
   Lists
   About
 






Visit the Apple Store online or at retail locations.

1-800-MY-APPLE
Contact Apple | Terms of Use | Privacy Policy
Copyright © 2011 Apple Inc. All rights reserved.

References:
	>Clients getting passed the correct AD permissions (From: dboyer <email@hidden>)