script for - Allow authentication from any domain in the forest

billystanton
New Contributor II

Hi All

As above, does anybody know of a way I can remotely uncheck the above option on our macs?

Its in the AD bind section, they are all bound to our AD but i would like to uncheck this without going to every machine to do so.

Thank you

Bill

2 ACCEPTED SOLUTIONS

mm2270
Legendary Contributor III
sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

View solution in original post

apizz
Valued Contributor

@billystanton, the -preferred [server] command in dsconfigad is for setting a preferred domain controller

View solution in original post

4 REPLIES 4

mm2270
Legendary Contributor III
sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

davidacland
Honored Contributor II

Not sure if it's still the case but you may need to change the search domains as well. They'll be pointing to all domains otherwise.

billystanton
New Contributor II

Is that the "Prefer this domain server" option?

Thanks!

apizz
Valued Contributor

@billystanton, the -preferred [server] command in dsconfigad is for setting a preferred domain controller