I have the commands / script working in our AD domain, but the -groups option is not working. I wind up getting incorrect entries in the allowed Admin groups.
According to man dsconfigad, it is supposed to be:
-groups "DOMAINMACADMINS,DOMAINIT Help Desk Support"
If I include the quotes, the quotes show up in the allowed Admin groups in dsconfigad -show
Must be missing something.
Works great by using the JSS Directory Bindings.
Any clues
thx in advance
jk