Binding an OS X computer to Active Directory at NEIU (Existing User)

Transcription

1 Binding an OS X computer to Active Directory at NEIU (Existing User) The instructions in this guide assume that a local Administrator account is available on the Macintosh computer. These instructions are based on Yosemite x. To bind the computer to Active Directory, first log into the HelpDesk administrator account. Next, Open the Users & Groups system preference and click on Login Options located near the bottom-left of the window. You may have to unlock the system preference by clicking on the Lock icon and entering the administrator password. If these settings have not been set already: 1. Set Automatic login to Off. 2. Set Display login window as: Name and password. Next to Network Account Server, click Join. On the sheet that appears: click Open Directory Utility. Binding to AD (existing user) 1 of 6 Anderson Lam 2015_02_19

2 Unlock the Directory Utility window, click on Active Directory, and click on the Edit button (shaped like a pencil). 1. Enter the following information: Active Directory Domain: univ.neiu.edu Computer ID: neiu-tagnumber 2. Click on the disclosure triangle to show additional options. 3. Click a checkmark next to Create mobile account at login. 4. Click on the Bind button. A login window will ask for Network Administrator credentials. Enter your NEIUport username and password and click on OK. Binding the computer to AD will take a few seconds. Binding to AD (existing user) 2 of 6 Anderson Lam 2015_02_19

3 Removing the existing local user If the user previously had a local home directory on the computer, you will need to redirect their AD account to access their previous home directory. Follow these steps before the user logs into Active Directory. 1. Log into the HelpDesk administrator account. 2. Go to the Users & Groups system preference. 3. Select the user s account in the list. 4. Click on the minus button at the bottom of the window. 5. On the confirmation sheet, select Don t change the home folder. 6. Click on the Delete User button. The user s home directory will be appended with the word (deleted). It will remain in the Users folder. Binding to AD (existing user) 3 of 6 Anderson Lam 2015_02_19

4 Log into Active Directory Have the user log into their computer using their NEIUport credentials. The computer will authenticate their account against Active Directory and create a local home directory for the user. Users are automatically given limited access to the computer. To elevate the user to Administrator role, follow the steps in the next section. Administrator Access for the User Log out of the user s account and log into the HelpDesk administrator account. Go to the Users & Groups system preference. 1. Select the user s account in the list. 2. Enable Allow user to administer this computer. 3. Disable Enable parental controls. Binding to AD (existing user) 4 of 6 Anderson Lam 2015_02_19

5 Redirecting the user s existing local home directory. Log into the Helpdesk Administrator account. In the Users & Groups system preference, rightclick on the user s account in the listing and choose Advanced Options. For the Home directory entry, click the Choose button. Select the home directory that has the word (deleted) appended to it. Click OK and close the Users & Groups system preference. In the Finder, go to the Users folder and delete the home directory that was created by logging into Active Directory. This is the pristine home directory that does not have any of the user s data. Select the home directory that has the word (deleted) and rename it by removing the word (deleted). Binding to AD (existing user) 5 of 6 Anderson Lam 2015_02_19

6 In the Users & Groups system preference, right-click on the user s account in the listing and again choose Advanced Options. For the Home directory entry, click the Choose button. Select the renamed home directory that no longer has the word (deleted) appended to it. Click OK and close the Users & Groups system preference. Correcting home directory permissions. Open the Terminal application. Enter the command: sudo -s When prompted, enter the HelpDesk administrator password. Enter the command: chown -R AD_Username /Users/home_directory AD_username refers to the user s Active Directory username. home_directory refers to the user s home directory. Depending on the number of files in the home directory, this may take several seconds to finish. Restart the computer and log the user back into their Active Directory account. Upon log in, you may be prompted by the Keychain Access utility to update the keychain password. Enter the previous local account password to synchronize Keychain Utility to the current Active Directory password. If all of their files are available to the user after login, then the migration process was successful. Log out of the user s account and log into the HelpDesk administrator account. Go to the Users & Groups system preference. 1. Select the user s account in the list. 2. Enable Allow user to administer this computer. 3. Disable Enable parental controls. Binding to AD (existing user) 6 of 6 Anderson Lam 2015_02_19