Skip to main content
Question

Can I view Domain Accounts via JAMF?

  • July 9, 2015
  • 12 replies
  • 27 views

Forum|alt.badge.img+4

Can I view domain accounts in JAMF? All I can see so far is Local users on any laptop I log into. What am I missing?

12 replies

Forum|alt.badge.img+13
  • Contributor
  • July 9, 2015

Do you have mobile accounts enabled?


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • July 9, 2015

Where would I find that button? send a screen shot if you can please


Forum|alt.badge.img+7
  • Contributor
  • July 9, 2015

@HaylieRoselea when you say Domain accounts do you mean can you browse the domain and search for users on the domain example apps like Windows AD searches the domain for users and you can edit , etc. or like WGRM searching the domain? is that what you're referring to?


Forum|alt.badge.img+13
  • Contributor
  • July 9, 2015

Login as a AD user and open system preferences -> Users & groups.

Also, while you're in that screen, what does it show under the logged in username within "Users & Groups"?


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • July 9, 2015

I want to add and remove Domain Users via JAMF. I also want to give specific permissions to Domain users. The Local accounts are admin but the Domain accounts on the laptop are admin, Managed, Mobile but I do not see them anywhere in JAMF that the domain user is even on the laptop. I only see that there is an Admin local account.


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • July 9, 2015

I want to add users via JAMF and give them certain permissions.


Forum|alt.badge.img+13
  • Contributor
  • July 9, 2015

Are you trying to grant AD users permission within the JSS?


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • July 9, 2015

Yes


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • July 9, 2015

Well yes and no. I would rather do it Via my Jamf admin console


Forum|alt.badge.img+7
  • Contributor
  • July 9, 2015

so basically you're trying to add users VIA the JSS and give them access like access to certain apps? admin privileges and whatever else? thats what I'm understanding. If thats what you're trying to do then JSS doesn't grant domain users individual admin rights unless I'm missing something you'd need to create a security group within AD first then add users in that group and you should be on your way with this.


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • July 9, 2015

Alright how about this... Why can I not see all of the users on a laptop via my admin program?


mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • July 9, 2015

@HaylieRoselea Have you set up a connection from the JSS to your AD domain controllers? That has to happen first before you'll be able to add users into the JSS from AD and assign them permissions. Once that connection is set up, you'll also be able to do things like set up policies that can use AD groups or individual AD users as the scope limitation, which gives you some additional flexibility.

You can add LDAP servers by going to System Settings > LDAP Servers in your JSS.

Edit: reading further, I may be misunderstanding exactly what it is you're looking to do, so if the above doesn't apply here, just ignore it.