Create new AD user from Self Service

jthurwood
New Contributor III

I'd like a way of being able to create a new computer user account from Self Service.

We have recently encrypted our machines using Filevault which means we can no longer easily log new Freelance users in who dont currently have a account on the machine, does anyone have an easier way of doing this?

1 REPLY 1

mm2270
Legendary Contributor III

See these two thread for some ideas (there are more than just these 2 by the way).
https://jamfnation.jamfsoftware.com/discussion.html?id=11606
https://jamfnation.jamfsoftware.com/discussion.html?id=7021

Specifically, you'll want to take a look at the createmobileaccount binary in the OS, which can create AD based user accounts. It doesn't create new accounts IN AD, but can create a cached mobile account from an existing one on the Mac. stevewood's thread specifically shows how he dealt with creating accounts that were not in the FV2 authorized list and getting them in there.
In your case though, you may have an issue if the system isn't already logged in as someone in order to run a script from Self Service for example. Not sure if that will be a problem or not for you.