Skip to main content
Question

Setting Active Directory groups as administrators in Directory Utility, w/ config profile

  • August 13, 2019
  • 5 replies
  • 25 views

Forum|alt.badge.img+4

Hi all, to start, I'm running Mojave in all our labs, and using Jamf Pro Cloud. I have a configuration policy set up to allow certain Active Directory groups to be administrators in our labs, but it doesn't seem to be working. In the payload, on the administrative tab, underneath enterprise admins, and domain admins, I put in DOMAINgroup. But it doesn't seem to be working, for example I'm in one of these groups, but my AD account doesn't have admin rights. Ideas?

5 replies

Forum|alt.badge.img+13

Is your slash pointing the right way?

Domain/Group


Forum|alt.badge.img+4
  • Author
  • Contributor
  • August 13, 2019

I really thought it was domain/group, is that wrong? And will it hurt to just add both domain/group, AND domaingroup?


Forum|alt.badge.img+13

Don't quote me as I don't use a cloud instance. Just spitballing over here. :) Show your config file.


Forum|alt.badge.img+8
  • New Contributor
  • August 14, 2019

@rahern I do something similar but I only put in the AD group name, not domain/group or domaingroup. My machines are bound to AD. It's been working for the most part, sometimes it takes a reboot for it to work but using just the group name seems to work.


Forum|alt.badge.img+4
  • Author
  • Contributor
  • August 14, 2019

Hmm, maybe I'll try that @prabe .