Skip to main content
Solved

script for - Allow authentication from any domain in the forest


Forum|alt.badge.img+5

Hi All

As above, does anybody know of a way I can remotely uncheck the above option on our macs?

Its in the AD bind section, they are all bound to our AD but i would like to uncheck this without going to every machine to do so.

Thank you

Bill

Best answer by mm2270

sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad
View original
Did this topic help you find an answer to your question?

4 replies

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • 7882 replies
  • Answer
  • December 1, 2015
sudo dsconfigad -alldomains disable

But, if you push it from Casper, drop the sudo as it won't be needed.
You should read through the man page for dsconfigad as well to get familiar with everything it can do.

man dsconfigad

davidacland
Forum|alt.badge.img+18
  • Valued Contributor
  • 1811 replies
  • December 1, 2015

Not sure if it's still the case but you may need to change the search domains as well. They'll be pointing to all domains otherwise.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • 39 replies
  • December 2, 2015

Is that the "Prefer this domain server" option?

Thanks!


apizz
Forum|alt.badge.img+15
  • Honored Contributor
  • 395 replies
  • December 2, 2015

@billystanton, the -preferred [server] command in dsconfigad is for setting a preferred domain controller


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings