Enterprise Mac Administrator's Guide

3.1. Binding to Active Directory

When binding to an Active Directory server, keep in mind that it is an individualized process; each workstation will need a computer account named for the machine created in the directory. While it is possible to pre-populate these accounts, the Apple Active Directory plug-in will create a computer account in Active Directory at the time of binding with the correct credentials if one does not already exist. As with Windows client account, each OS X computer account contains a unique pre-shared key used to authenticate that individual machine to the directory. This individualistic nature is an important aspect to consider when looking at automating the process. The process of binding a machine to Active Directory ...