Make all new OS X Mavericks accounts, including network accounts, local admin?
We have a small collection of Macs at the office and are struggling with how to make all new network accounts local administrator.
What we have managed to do is make all new network users adminstrators, but only when they log on with network access to the Active Directory. In other words, network users are only administrators as long as the Mac is at the office. Once they take the Mac off the premises they are no longer local admin.
Is there a simple way to make all accounts, even network accounts, local admin? Even when the company network is unavailable?
Appreciate any help I can get!
0 Comments
[ + ] Show comments
Answers (2)
Answer Summary:
Please log in to answer
Posted by:
EdT
10 years ago
Make the users a member of the local admins group on the machine?
Comments:
-
That's what we did. We added a group with all AD accounts to the local admins group but the admin rights are removed when the computer is disconnected from the corporate network.
What I need is some way to make all users, new and old, local admin. - JohnMcMillion 10 years ago
Posted by:
chucksteel
10 years ago
You can use the following command to add a user as admin:
sudo dseditgroup -o edit -a ActiveDirectoryUserID -t user admin
For a small set of machines and users you could run the command for each user.
Also, check this thread on the MacEnterprise list for how to automatically add users as admin at login:
http://lists.psu.edu/cgi-bin/wa?A2=ind1405&L=macenterprise&F=&S=&P=479003
