| TERMS |
|
This document and what comes with it are
provided as-is with blunt warning: Use at your own risk,
buyer beware. You break your system; you own the resolution
as well. We have no liability for what you do, or can't
do, or fail to do with this information. Your entire protection
is to start over again with a protected backup, or from
protected system. If you don't want to accept this idea,
please don't use this document.
|
|
By default, you will have to enter your domain username and password every time you access a server resource when that resource is not connected to the Mac (i.e., right after bootup, after a share has been “ejected”, or if a network connection drops the connection to the server). By joining the Macintosh to Active Directory, you can log into the Mac with your Active Directory user credentials and not have to enter them every time you access a shared resource. To be able to log in to the Mac with Active Directory credentials, follow these steps.
- From the Utilities folder in the Applications folder, open the Directory Utility application.
- Once the application opens and finishes the process of detecting directory servers on the network, click the Show Advanced Settings button.
- When the Advanced Settings appear, click the Services icon.
- Click the lock to get access to the panel. You will be prompted for credentials. Enter your Macintosh username and password, then click OK.
- Double-click on the Active Directory line to open the Active Directory configuration.
- Click on the Show Advanced Options triangle.
- Enter the internal domain name in the Active Directory Domain field.
- Change the name of the Mac to a shorter name in the Computer ID field.
- Turn on the Create mobile account at login checkbox.
- Select the Administrative tab.
- Turn on the Prefer this domain server checkbox and enter the fully-qualified domain name of the SBS server (i.e., servername.domainname.local).
- Turn on the Allow administration by checkbox.
- Click Bind to join the Macintosh to the domain.
- Enter the domain administrator username and password when prompted. The Macintosh will be placed in the Computers container by default. This can be changed in Active Directory later if needed.
- Once the join process is complete, you will see both the Active Directory Forest and Active Directory Domain fields populated.
- Confirm that the Active Directory checkbox is enabled in Directory Utility and close the application.
- Open System Preferences and click the Accounts icon.
- Click the lock to make changes and enter the password for the local Mac account.
- Click on the Login Options icon in the navigation tree.
- Set Automatic Login to Disabled.
- Close System Preferences.
- Log out of the Mac account by selecting Log Out from the Apple menu. You do not need to restart the Mac to be able to log in with your Active Directory credentials.
- When you get the login screen, click Other.
- Enter your Active Directory credentials as domainname\username.
- You will be prompted to create a mobile account. Click Create Now.
- Once login completes, open System Preferences and open the Accounts pane.
- Click the lock to make changes.
- When you are prompted to enter an administrator credentials, you will need to enter information for the local Macintosh account. You will need to enter the short name as the account name. If you are not sure what the short name is, log back in as the Mac user and look for the name of the home folder. The home folder is named with the short name of the account.
- After you enter the authentication information, turn on the Allow user to administer this computer checkbox.
- You will get a message that you need to log out and log back in for the settings to take effect. Click OK.
- Log out and log back in with the Active Directory credentials.
- Open a new Finder window and select the server name in the Shared section of the navigation tree. All of the shares on the server will appear and can be selected from here. You can also use the Connect to Server method described earlier in this document to connect. The difference is that you will not be prompted to enter a username and password when you enter the network resource you wish to use.
|