Quick Tip: dsconfigad

Bind Computer:<br>
<i>sudo dsconfigad -a computername_here -u username -ou “CN=Computers,DC=domain,DC=org” -domain domain.org</i></p>

Unbind Computer:<br>
<i>sudo dsconfigad -f -r -u username</i></p>

Enable Mobile Accounts<br>
<i>dsconfigad -mobile enable<br>
dsconfigad -mobileconfirm disable</i></p>

Show Active Directory Settings

Show DS Configuration:<br>
<i>dsconfigad -show
<blockquote>
Active Directory Forest = domainname.local<br>
Active Directory Domain = domainname.local<br>
Computer Account = MAC[Serial#]<br>
Advanced Options – User Experience<br>
Create mobile account at login = Enabled<br>
Require confirmation = Disabled<br>
Force home to startup disk = Enabled<br>
Mount home as sharepoint = Disabled<br>
Use Windows UNC path for home = Enabled<br>
Network protocol to be used = smb<br>
Default user Shell = /bin/bash<br>
Advanced Options – Mappings<br>
Mapping UID to attribute = not set<br>
Mapping user GID to attribute = not set<br>
Mapping group GID to attribute = not set<br>
Generate Kerberos authority = Enabled<br>
Advanced Options – Administrative<br>
Preferred Domain controller = not set<br>
Allowed admin groups = not set<br>
Authentication from any domain = Enabled<br>
Packet signing = allow<br>
Packet encryption = allow<br>
Password change interval = 14<br>
Restrict Dynamic DNS updates = not set<br>
Namespace mode = domain</I></p>