Skip to main content
Solved

script for - Allow authentication from any domain in the forest

  • December 1, 2015
  • 4 replies
  • 22 views

Forum|alt.badge.img+5

Hi All

As above, does anybody know of a way I can remotely uncheck the above option on our macs?

Its in the AD bind section, they are all bound to our AD but i would like to uncheck this without going to every machine to do so.

Thank you

Bill

Best answer by mm2270

sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

4 replies

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • Answer
  • December 1, 2015
sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • December 1, 2015

Not sure if it's still the case but you may need to change the search domains as well. They'll be pointing to all domains otherwise.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • December 2, 2015

Is that the "Prefer this domain server" option?

Thanks!


apizz
Forum|alt.badge.img+15
  • Honored Contributor
  • December 2, 2015

@billystanton, the -preferred [server] command in dsconfigad is for setting a preferred domain controller