Skip to main content
Question

Bind Computer to existing object in AD

  • February 27, 2015
  • 2 replies
  • 0 views

Forum|alt.badge.img+17

It looks like you have to configure an OU to create an AD directory bind in Casper, but I know that with dsconfigad you can simply bind to a pre-existing object in AD without specifying an OU.

We're about to spin off a new company/domain taking thousands of our Macs, and rather than build a binding for each of our ~100 OUs (or script it via dsconfigad, which would expose AD credentials in the JSS in plantext if I have to pass a variable), I'd like to simply rejoin to the computer objects that we're cloning over to the new domain.

Has anyone had experience with this? Am I missing an easier way?

Edit: I also don't see an "unbind" option in Casper and directory bindings fail if the client already believes it is bound, I feel like I am missing something here as well.

2 replies

RobertHammen
Forum|alt.badge.img+28
  • Esteemed Contributor
  • 1027 replies
  • February 27, 2015

Probably want to use a script to unbind. Maybe a policy to run your unbind script, then re-bind to the new directory binding. Have done something like this for domain moves before, nothing like what you are trying to accomplish, however.


bentoms
Forum|alt.badge.img+35
  • Legendary Contributor
  • 4331 replies
  • February 28, 2015

@alexjdale, I'm sure that even though the JSS's Directory Binding has an OU set.. If it finds the existing record it uses that without moving the record to the OU specified.

So you could specify a "temp" OU for Macs to full into if the do not already have an Caomputer Object when found.

Obviously, test.. But am sure that's how it works.


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings