KACE Product Support

join_domain.vbs is for a windows box, aren't these macs? Or were you just mentioning the macs as the reason your naming convention was complicated? If so, I have an example post installation task in my ikbox (not kbox) that joins macs to the domain, can copy it here if you wish.

Linda,

I would like to see your script for joining Macs to the domain, if you don't mind.

Thanks,

Chris...

Yes, these are virtual xp boxes running xpsp3. We are not currently using our Kboxes to manage our macs but may do so in the future so I, too, would like you to post that script. Do you join them to AD or to OD?

The script is just one of the default ikbox ones. I don't have any macs in my environment, so I have never actually tested it. Its called Example: Join Active Directory Domain (10.5).

As far as your original question, seeings how these aren't macs; I also have very complex naming requirements. I still do my joinad from the ikbox though. My VERY last task of every scripted install renames the PC according to our rules, at the end of the rename, it sets a runonce to join the AD, the runonce uses a 'strap' to fire off the joinad. That way windows continues loading. If you don't use some kind of strap, the pc hangs up at the runonce, and usually not enough windows services are 'ready' to join the domain. I probably overly complicated the whole process, but it works for me, and it works well :)

Copied and pasted the MAC JOINAD out of my ikbox below.

Thanks!

Mike

SHELL SCRIPT:
#!/bin/bash

### You must edit these for your specific environment

# 1) fully qualified DNS name of Active Directory Domain.
domain="test.example.com"

# 2) username of a privileged network user.
udn=""

# 3) password of a privileged network user.
password=""

# 4) Distinguished name of container for the computer
ou="ou=Computers,ou=lab,DC=test,DC=example,DC=com"

# 5) 'enable' or 'disable' automatic multi-domain authentication
alldomains="enable"

### End of configuration

# Get the local computer's name.
computerid=`/usr/sbin/scutil --get LocalHostName`

# Activate the AD plugin, just to be sure
defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Active"
plutil -convert xml1 /Library/Preferences/DirectoryService/DirectoryService.plist

# Bind to AD
dsconfigad -f -a $computerid -domain $domain -u "$udn" -p "$password" -ou "$ou"
dsconfigad -alldomains $alldomains

# Add the AD node to the search path
if [ "$alldomains" = "enable" ]; then
csp="/Active Directory/All Domains"
else
csp="/Active Directory/$domain"
fi

dscl /Search -append / CSPSearchPath "$csp"
dscl /Search -create / SearchPolicy dsAttrTypeStandard:CSPSearchPath
dscl /Search/Contacts -append / CSPSearchPath "$csp"
dscl /Search/Contacts -create / SearchPolicy dsAttrTypeStandard:CSPSearchPath

# Restart Directory Service
killall DirectoryService
sleep 2

exit 0

NOTES:
Be sure and edit the standard parameters area of the script to match your AD domain requirements.