Local admin rights on Mac domain users
Hey All,We're a mostly Windows environment, with a bunch of Macs that have slowly creeped onto the network. Our practice right now is that we give all domain Mac users local admin rights to their Macs,...
View ArticleLocal admin rights on Mac domain users
Generally, you only need admin rights the same sort of way you do in Windows. System changes, program installs, etc. I am hoping that you handle those requests for your Windows users and don't give...
View ArticleLocal admin rights on Mac domain users
Standard best practice - Mac or Windows - is to not give users admin rights. Why do they need it ?You can restrict access by requiring admin privileges for "system-wide" preferences, see System...
View ArticleLocal admin rights on Mac domain users
Whoolly wrote:Generally, you only need admin rights the same sort of way you do in Windows. System changes, program installs, etc. I am hoping that you handle those requests for your Windows users and...
View ArticleLocal admin rights on Mac domain users
David_CSG wrote:Standard best practice - Mac or Windows - is to not give users admin rights. Why do they need it ?You can restrict access by requiring admin privileges for "system-wide" preferences,...
View ArticleLocal admin rights on Mac domain users
Our users remote access into our rdp servers which have standard stuff on them like email, word, excel, etc. So whether it's a mac or a pc it doesn't matter because they're all going to the same place....
View ArticleRe: Local admin rights on Mac domain users
Don't shoot me!!! I give my users admin rights to their computers with a huge disclaimer that they are responsible and if they mess up I will reimage their machine. I tell them if they have any...
View ArticleLocal admin rights on Mac domain users
Add me into the camp with Jack. We're primarily Mac here and almost all of our users have local admin accounts. That is how it was setup when I got here and for the most part it works just fine....
View ArticleLocal admin rights on Mac domain users
Local admin rights are not allowed in many environments for compliance requirements. Such is the case here. We are currently evaluating Macs for use as a standard/supported corporate device. We've...
View ArticleLocal admin rights on Mac domain users
Terry22 wrote:Local admin rights are not allowed in many environments for compliance requirements. Such is the case here. We are currently evaluating Macs for use as a standard/supported corporate...
View ArticleLocal admin rights on Mac domain users
@brandensanto:Yep, I've got the Mac connected to the domain, no problem there. Got everything working, for both the native OS-X and Fusion VMs, including shares, patch updates, malware protection,...
View ArticleLocal admin rights on Mac domain users
Clarification: I CAN login using a standard domain account, by selecting "Switch User", which allows a domain login using the standard \ format. What I want is to "match" the normal "domain" format...
View ArticleLocal admin rights on Mac domain users
Terry22 wrote:Clarification: I CAN login using a standard domain account, by selecting "Switch User", which allows a domain login using the standard \ format. What I want is to "match" the normal...
View ArticleLocal admin rights on Mac domain users
Hmmm, what is the normal "domain" format login on Windows machines?
View ArticleLocal admin rights on Mac domain users
Domain is set, so normal login is just the userid. / is used when needed, which is unusual, such as logging into a terminal server, OWA, etc.
View ArticleLocal admin rights on Mac domain users
Terry22 wrote:Domain is set, so normal login is just the userid. / is used when needed, which is unusual, such as logging into a terminal server, OWA, etc.I'm under the impression that when a Mac is...
View ArticleLocal admin rights on Mac domain users
That may be true...I'll find out shortly. I think the problem may be an identical local account name, which may be overriding the domain account. I've deleted the local "standard" account and added a...
View ArticleLocal admin rights on Mac domain users
The default search path (lookup order) is local first, which is by design and probably involved in why local account names cannot match a needed/desired domain (AD) login account name.
View ArticleLocal admin rights on Mac domain users
That makes sense. If it's looking for the name...without the domain prefix...then it would certainly find the local account first...which is the behavior I'm seeing.
View Article
