active-directory – How to Add a Mac to Windows Active Directory

active-directorymacmac-osx

I've gone into the Directory Utility on the mac, clicked on the services tab, entered the Active Directory Domain and Computer ID, clicked the Bind button and it showed a little status label which flickered through 5 of 5 steps and then said "An unknown error occurred".

If I ignore the error and just click the OK button further down the screen and make sure the Active Directory service is ticked in the list of services, then go to the Directory Servers tab and try to add an Active Directory by entering my ad domain, computer id, admin username and password I get an error "Unable to add the domain. An unexpected error of type -14090 (eDSAuthFailed) occurred."

Any ideas?

Best Answer

Either the credentials you provided were incorrect to join the computer to the domain or the AD server is not set up to allow that machine to join it.

Assuming your credentials are correct, and you see nothing else preventing that computer from joining the domain, try to follow this guide over again from scratch:

Expired link removed

Related Solutions

How to put a computer into an Active Directory machine group

In the Active Directory Users and Computers Snap-In you can add Users or Computers to groups.

Rob

How to add an Open Directory server via a script

I discovered the method (Deploy Studio) I was deploying my images had scripts already to do the Open Directory binding - I've modified the scripts slightly to give the crux of the script for here to answer my question. This example only uses anonymous binding (not explicitly bound to the OD server)

#!/bin/sh

# Used ds_open_directory_binding.sh (v1.6) from Deploy Studio as a base for the explicit question.
# I recommend downloading Deploy Studio (http://deploystudio.com) to see other methods but the crux
# of how it is done can be read here. (eg. no error checking here)

#Enable LDAPv3 Plugin
defaults write /Library/Preferences/DirectoryService/DirectoryService "LDAPv3" Active 2>&1
chmod 600 /Library/Preferences/DirectoryService/DirectoryService.plist 2>&1

/usr/sbin/ipconfig waitall

#Configure LDAP
dsconfigldap -a 'server.example.com' 2>&1

#Restart DS
killall DirectoryService
sleep 5

#Create Search Policy
dscl localhost -create /Search SearchPolicy CSPSearchPath 2>&1

#Create Contacts
dscl localhost -create /Contact SearchPolicy CSPSearchPath 2>&1

#Add OD Server to the search path
dscl localhost -append /Search CSPSearchPath '/LDAPv3/server.example.com' 2>&1

#Add OD Server to Contact Search Policy
dscl localhost -append /Contact CSPSearchPath '/LDAPv3/server.example.com' 2>&1

Best Answer

Related Solutions

How to put a computer into an Active Directory machine group

How to add an Open Directory server via a script

Related Topic