2.2 How To Bind Mac To Active Directory

Binding Mac to Active Directory is preliminary required to get the Advanced Authentication Client working. To do it follow the steps:

  1. Click Apple icon in left top corner, select System Preferences...

  2. Click Network icon.

  3. Click Advanced... button.

  4. Switch to DNS tab.

  5. In DNS Servers section double click an existing record to edit it. If it's not possible click + button.

  6. Enter IP address of your DNS server. E.g. 192.168.0.200.

  7. Click + button in Search Domains section.

  8. Enter FQDN of your domain. E.g. company.com.

  9. Click OK.

  10. Click Apply in Network window.

  11. Switch back to the System Preferences... menu.

  12. Click Users & Groups icon.

  13. Select Login Options item.

  14. Click lock icon in bottom part of the window to unlock marking changes.

  15. Enter local admin's Username and Password and click Unlock.

  16. Click Join... next to the Network Account Server text.

  17. In Server field enter the address of an Active Directory Domain. E.g. company.com.

  18. Fill the AD Admin User and AD Admin Password fields.

  19. Click OK.

  20. In some seconds you will see a green icon near your domain name, next to the Network Account Server text.

  21. Click Edit...

  22. Click Open Directory Utility...

  23. Click lock icon in bottom part of the Directory Utility window to unlock marking changes.

  24. Enter local admin's Username and Password and click Modify Configuration.

  25. Double check the Active Directory item.

  26. Expand Show Advanced Options.

  27. Switch to Administrative tab.

  28. Check the Allow administration by option.

  29. Click OK.

  30. Click lock icon in bottom part of the Directory Utility window to prevent further changes.

  31. Close the Directory Utility and Users & Groups windows.

To check the binding follow the steps:

  1. Run Terminal.

  2. Execute the command: login <UsernameOfActiveDirectoryUser>. E.g. login pjones.

  3. Enter the user's password. The console should switch to the user.

  4. Execute the command: exit. Close the Terminal.

  5. Click Apple icon in left top corner, select Log Out <username>...

  6. In user selection screen you will see the Other... icon.

  7. Click it and try to log on as the domain user.