{"id":38780,"date":"2010-11-02T15:23:52","date_gmt":"2010-11-02T19:23:52","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=38780"},"modified":"2022-05-11T13:11:34","modified_gmt":"2022-05-11T17:11:34","slug":"mac","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/services\/security\/iam\/directory\/ad\/mac\/","title":{"rendered":"Joining macOS Devices to AD"},"content":{"rendered":"

This page provides basic instructions for integrating a macOS 10.6 Snow Leopard<\/span> or newer computer with Active Directory, allowing the use of AD credentials to log in. These instructions require AD administrative accounts, so must be used by OU administrators.<\/p>\n

Bind the computer to AD<\/h3>\n
    \n
  1. Open Applications<\/strong> > System Preferences.<\/strong><\/li>\n
  2. Click on the Users & Groups (Accounts on older versions)<\/strong> preference pane.<\/li>\n
  3. Click\u00a0Login Options<\/strong> located in the left column.<\/li>\n
  4. Click Join…<\/strong><\/li>\n
  5. Enter ad.bu.edu<\/strong> as the Server<\/strong>. Snow Leopard (or newer operating systems) will automatically determine the type of server from the address you enter. The Client Computer ID<\/strong> will be based on the name in the Mac’s Sharing settings.<\/li>\n
  6. The AD Admin User<\/strong> and AD Admin Password<\/strong> fields should be the AD credentials of a departmental OU administrator.<\/li>\n
  7. Click OK <\/strong>and wait for the bind to complete.<\/li>\n<\/ol>\n

    Configure<\/h3>\n
      \n
    1. Once the progress indicator has disappeared, click on the\u00a0Edit… <\/strong>button in the Users & Groups\/Accounts<\/strong> pane.<\/li>\n
    2. Click Open Directory Utility…<\/strong><\/li>\n
    3. Authenticate <\/strong>to make changes.<\/li>\n
    4. Double-click Active Directory<\/strong>.<\/li>\n
    5. Click on the triangle next to Show Options\/Show Advanced Settings<\/strong> to expand the window.<\/li>\n
    6. Select the User Experience <\/strong>tab.<\/li>\n
    7. Check Create mobile account<\/strong> for systems that will not have an always-on network connection. For instance, this would be appropriate for laptops that may be used while not connected to a network. If you do select this option, it is best to uncheck Require confirmation before creating a mobile account<\/strong> option as the message it produces can be a bit confusing.<\/li>\n
    8. Uncheck Use UNC path from Active Directory.<\/strong><\/li>\n
    9. <\/strong>Make sure Force local home<\/strong> is checked (This will already default on when using mobile accounts).<\/li>\n
    10. You may also optionally configure the default user shell by leaving the default value or by adding \/usr\/bin\/false, which disables shell access for AD users.<\/li>\n
    11. Once all of your Directory Utility settings are as you would like them, accept and close all windows until you are back to the Users & Groups\/Accounts<\/strong> pane. On this screen, change the Display login window as<\/strong> option to Name and Password.<\/strong><\/li>\n<\/ol>\n

      The steps above should allow authentication using AD credentials, when on a BU network. Restart the computer and try logging in with an AD account. No<\/strong> AD prefix or @bu.edu suffix are required for the username value.<\/p>\n","protected":false},"excerpt":{"rendered":"

      This page provides basic instructions for integrating a macOS 10.6 Snow Leopard or newer computer with Active Directory, allowing the use of AD credentials to log in. These instructions require AD administrative accounts, so must be used by OU administrators. Bind the computer to AD Open Applications > System Preferences. Click on the Users &…<\/p>\n","protected":false},"author":1303,"featured_media":0,"parent":1191,"menu_order":6,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/38780"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/1303"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=38780"}],"version-history":[{"count":26,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/38780\/revisions"}],"predecessor-version":[{"id":119250,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/38780\/revisions\/119250"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/1191"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=38780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}