dsconfigad
command in the Terminal app to bind a Mac to Active Directory.dsconfigad -preferred <adserver.example.com> -a <computername> –domain example.com -u administrator -p <password>
dsconfigad
to set the administrative options in Directory Utility:dsconfigad -alldomains enable -groups domain <[email protected]>, enterprise <[email protected]>
dsconfigad
command–line tool.dsconfigad
command–line tool to set any interval that your policy requires.dsconfigad -passinterval 0
dsconfigad
command–line tool, a user in one domain can have the same short name as a user in a secondary domain. Both users have to log in using the name of their domain followed by their short names (DOMAINshort name), similar to logging in to a Windows PC. To enable this support, use the following command:dsconfigad -namespace <forest>
dsconfigad -packetencrypt ssl
/usr/bin/security add-trusted-cert -d -p basic -k /Library/Keychains/System.keychain <path/to/certificate/file>
dsconfigad
command–line tool. Specify the BSD name of the interface in which to associate the DDNS updates. The BSD name is the same as the Device field, returned by running this command:networksetup -listallhardwareports
dsconfigad
in a script, you must include the clear-text password used to bind to the domain. Typically, an Active Directory user with no other administrator privileges is delegated the responsibility of binding Mac computers to the domain. This user name and password pair is stored in the script. It’s common practice for the script to securely delete itself after binding so this information no longer resides on the storage device.