All -
Looking for some help here as far as a script to add multiple AD groups to the OS X AD Plugin.
In our environment, historically, rights to numerous items are granted by adding all users to a specific AD group, this is for easier support as well as keeping track of rights and access.
Currently, in the Casper environment that I have become responsible for there is a script that runs at build time after AD binding. This does numerous things, one of which is adding our desktop techs AD group to the local admin group so that they have the rights to administer the machine.
Here is the current script:
#!/bin/sh
# Purpose: Set AD plugin options after binding
# Enable mobile accounts
dsconfigad -mobile enable >> /var/log/jamf.log
# Disable mobile account creation confirmation
dsconfigad -mobileconfirm disable >> /var/log/jamf.log
# Force local home folder
dsconfigad -localhome enable >> /var/log/jamf.log
# Disable UNC network home paths
dsconfigad -useuncpath disable >> /var/log/jamf.log
# Add DOMAINDesktopAdmins to administrator group
dsconfigad -groups DOMAIN\\DesktopAdmins >> /var/log/jamf.log
# Allow authentication from any Domain in the Forest
dsconfigad -alldomains enable >> /var/log/jamf.log
# Allow packet signing
dsconfigad -packetsign allow >> /var/log/jamf.log
# Allow packet encryption
dsconfigad -packetencrypt allow >> /var/log/jamf.log
I am hoping to add additional AD groups to this script. However, when I have added them, either as a whole new #section or just under the current #section it never adds the second group. When I run the script to add another AD group outside of the build it also does not work correctly.
Can anyone post something here (or tell me whats wrong) that will actually add the second (or third/fourth/fifth, etc...) AD group to the plugin at build time as well as something to run on machines already built so that they will get additional AD groups as well? Make sense?
This works perfectly for the single group addition but never for another group. Would love to alter the script at build time to add these groups, but also have something that works to add additional groups at any time in the future.
As always, any help greatly appreciated.