script for - Allow authentication from any domain in the forest

[billystanton]

Hi All

As above, does anybody know of a way I can remotely uncheck the above option on our macs?

Its in the AD bind section, they are all bound to our AD but i would like to uncheck this without going to every machine to do so.

Thank you

Bill

[mm2270 · Accepted solution]

sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

[mm2270 · Accepted solution]

sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

[davidacland]

Not sure if it's still the case but you may need to change the search domains as well. They'll be pointing to all domains otherwise.

[billystanton]

Is that the "Prefer this domain server" option?

Thanks!

[apizz · Accepted solution]

@billystanton, the -preferred [server] command in dsconfigad is for setting a preferred domain controller