Creating local client's admin account in ldap

Hi,
I have a mac client, which authenticats to the ldap running on a mac os x server for user login. How can I configure a user in the ldap on the server, so hat when this user logs in to the mac client, he will be a local administrator for that mac client.
Thanks.

If you haven't received an answer yet, its quite simple. Take a user with whom you want to have admin control on a local machine and make that users primary group 80 via Workgroup Manager.

Similar Messages

I just purchased a one year old iMac. How do I create a brand new admin account?

I just purchased a one year old iMac. How do I create a brand new admin account?

The first thing to do with a second-hand computer is to erase the internal drive and install a clean copy of OS X. You—not the original owner—must do that. How you do it depends on the model, and on whether you already own another Mac. If you're not sure of the model, enter the serial number on this page. Then find the model on this page to see what OS version was originally installed.
It's unsafe, and may be unlawful, to use a computer with software installed by a previous owner.
1a. If you don't own another Mac
If the machine shipped with OS X 10.4 or 10.5, you need a boxed and shrink-wrapped retail Snow Leopard (OS X 10.6) installation disc from the Apple Store or a reputable reseller—not from eBay or anything of the kind. If the machine is very old and has less than 1 GB of memory, you'll need to add more in order to install 10.6. Preferably, install as much memory as it can take, according to the technical specifications.
If the machine shipped with OS X 10.6, you need the installation media that came with it: gray installation discs, or a USB flash drive for a MacBook Air. You should have received those media from the original owner, but if you didn't, order replacements from Apple. A retail disc, or the gray discs from another model, will not work.
To start up from an optical disc or a flash drive, insert it, then restart the computer and hold down the C key at the startup chime. Release the key when you see the gray Apple logo on the screen.
If the machine shipped with OS X 10.7 or later, you don't need media. It should start up in Internet Recovery mode when you hold down the key combination option-command-R at the startup chime. Release the keys when you see a spinning globe.
Some models shipped with OS X 10.6 and received a firmware update after 10.7 was released, enabling them to use Internet Recovery. If you have one of those models, you may not be able to reinstall 10.6 even from the original discs, and Internet Recovery may not work either without the original owner's Apple ID. In that case, contact Apple Support, or take the machine to an Apple Store or another authorized service provider to have the OS installed.
1b. If you do own another Mac
If you already own another Mac that was upgraded in the App Store to the version of OS X that you want to install, and if the new Mac is compatible with it, then you can install it. Use Recovery Disk Assistant to prepare a USB device, then start up the new Mac from it by holding down the C key at the startup chime. Alternatively, if you have a Time Machine backup of OS X 10.7.3 or later on an external hard drive (not a Time Capsule or other network device), you can start from that by holding down the option key and selecting it from the row of icons that appears. Note that if your other Mac was never upgraded in the App Store, you can't use this method.
2. Partition and install OS X
If you see a lock screen when trying to start up from installation media or in Recovery mode, then a firmware password was set by the previous owner, or the machine was remotely locked via iCloud. You'll either have to contact the owner or take the machine to an Apple Store or another service provider to be unlocked. You may be asked for proof of ownership.
Launch Disk Utility and select the icon of the internal drive—not any of the volume icons nested beneath it. In the Partition tab, select the default options: a GUID partition table with one data volume in Mac OS Extended (Journaled) format. This operation will permanently remove all existing data on the drive.
After partitioning, quit Disk Utility and run the OS X Installer. If you're installing a version of OS X acquired from the App Store, you will need the Apple ID and password that you used. When the installation is done, the system will automatically restart into the Setup Assistant, which will prompt you to transfer the data from another Mac, its backups, or from a Windows computer. If you have any data to transfer, this is usually the best time to do it.
Then run Software Update and install all available system updates from Apple. To upgrade to a major version of OS X newer than 10.6, get it from the Mac App Store. Note that you can't keep an upgraded version that was installed by the original owner. He or she can't legally transfer it to you, and without the Apple ID you won't be able to update it in Software Update or reinstall, if that becomes necessary. The same goes for any App Store products that the previous owner installed—you have to repurchase them.
3. Other issues
If the original owner "accepted" the bundled iLife applications (iPhoto, iMovie, and Garage Band) in the App Store so that he or she could update them, then they're irrevocably linked to that Apple ID and you won't be able to download them without buying them. Reportedly, Mac App Store Customer Service has sometimes issued redemption codes for these apps to second owners who asked.
If the previous owner didn't deauthorize the computer in the iTunes Store under his Apple ID, you wont be able to authorize it immediately under your ID. In that case, you'll either have to wait up to 90 days or contact iTunes Support.
When trying to create a new iCloud account, you might get a failure message: "Account limit reached." Apple imposes a lifetime limit of three iCloud account setups per device. Erasing the device does not reset the limit. You can still use an iCloud account that was created on another device, but you won't be able to create a new one. Contact iCloud Support for more information. The setup limit doesn't apply to Apple ID accounts used for other services, such as the iTunes and Mac App Stores, or iMessage. You can create as many of those accounts as you like.

Creating admin account in ldap

Hi,
I have a mac client, which authenticats to the ldap running on a mac os x server for user login. How can I configure a user in the ldap on the server, so hat when this user logs in to the mac client, he will be a local administrator for that mac client.
Thanks.

You don't create those accounts on the Server.
On a Workstation, the initial account you create when you install Mac OS X, or any new account you add to that Workstation using:
System Preferences > Accounts
... will be a strictly local \[this Mac ONLY] account. Of course, you must be an Admin to create new accounts there.
By contrast, Network-visible accounts are created with Workgroup Manager, provided you point WorkGroup Manager at the correct network-visible LDAPv3 directory when you create those new accounts.
I find it very convenient to have a "Standard" Administrator ID on every Workstation, so that I can always log on and do maintenance and updates, even without a connection to the Server. I use a name that starts with X so that it alphabetizes near the end of the list and does not get in the way. This really is a multitude of accounts -- one per workstation -- that have the same name, but do NOT share a Home Directory on the Server.
The down side of this is if the kids ever discover the password for one of those accounts, they know the password for every similar account on every Workstation.
If that does not make sense, or I have not answered your intended question, please ask again!
Message was edited by: Grant Bennet-Alder

Creating new admin account and deleting old one

I am handing my MacbBook Pro to my wife
I am thinking about deleting my account (which is an admin, of course). I made her an admin account and she has access to all my apps when she logs in...
I WANT her to have access to my applications as if they were hers even when my account is deleted (e.g. Adobe CS3, Skype, etc.).
My Question:
When I delete my admin account (with which the applications were installed), will she automatically not have access to the apps in the "applications folder" anymore? In other words, when I delete the admin account with which the application where installed, do all applications and setting from that account get deleted as well from all other users?
Thank you.
(transfering, sync'ing, etc. can be so easy but such a headache from a personal standpoint: managing changes)

So, this would create her a new admin account but:
1. my old account folder will be there but without being associated with a user
2. same for her old folder
3. all I have to do is drag her old account's application folder + application support folder onto her new admin account and all applications would run like we never even even left her old account behind?
Will any Leopard boot CD work or does it have to be one made specifically with her computer (it didn't come with a boot CD)...
thanks...

Admin account missing rights

Hello,
I am not sure if this is the right subforum, but I have a question. I have a domain with a Server 2012 STD AD setup. There is also a terminal server in the environment. I had one admin account which had full access to everything.
I copied the AD account and ensured it had all the same group memberships, and I also added it to the local admins of the Terminal Server.
The issue is that the original account still has all the full access on that Terminal Server, but when logging in with the admin user I created by copying the admin account, I don't see things like Computer or the ability to open the Task Manager, almost
as if its being treated as a normal user.
I tried going through group policy and all that but I don't see anything jumping out at me that would cause this (though I may be missing it entirely if the issue is there).
How can I get that second account to have all the permissions to do anything just as the original account does?
Thanks for any help

Hi,
Would you please let me know whether you copy the domain user as following article described?
Copy a User Account
This coping operation should copy the group membership with same permissions or delegations. Please navigate
to Properties of this copied domain user account. Then select ‘Member Of’ tab and compare it with that original account. Did you find any difference in ‘Member Of’ tab?
If any update or anything I misunderstand, please don’t hesitate to let me know.
Hope this helps.
Best regards,
Justin Gu
Hi Justin,
Yes, this is the procedure that I followed when copying the user account. It has all the same group memberships as the original. It appears that the only place it really doesn't have the same permissions as the original user is on the Terminal
Server in my office. Everywhere else it looks fine from what I can tell.
I have been checking Group Policy and Local Security Settings on that specific server, but I am not sure if there are specific places to look for this kind of this.

I made a mess of my admin accounts need to consolodate please help :)

Hello so i've been having this issue with my main admin account... for about a year now there have been items stuck in my trash folder and safari crashes after a bit. i've taken my computer to apple store and they cannot fix they told me to reinstall OS with disk but when i try to do that it times out... out of frustration i created a new admin account and what do you know i do not have the same issues with the trash... so i copied all the mail folders, preferences and address books over but the passwords didnt follow... so i was only able to get mail on the accounts i could remember the passwords to... so i was using the other account and kind of going back and forth to the old account but now i'm having even more issues with the second account... my macbook pro is all kinds of screwy ...
i need to consolidate the mail i have on both admin accounts... because i have to go back to using the main admin account and i want to transfer all the mail i've been receiving on the other account for the past 2 months to the old account.
can someone please help?

Ok so i figured out what to do (through lots of research and headaches) just thought i'd share my solution... i needed to consolidate two admin applemail accounts with the same email accounts and i forgot all of my passwords...
# To back up Mail preferences (i only did this on my main admin account seeing as though the secondary had the same exact preferences). (i'd suggest also backing up addressbook info as well...)
1. Create a uniquely-named folder on your desktop (or other favorite location- like an external drive). For example, you might call it "Mail Prefs Backups May152005" (adding a date is a good idea).
2. Quit Mail if it's running.
3. In the Finder choose Home from the Go menu.
4. Open the Library folder.
5. Open the Preferences folder.
6. Copy the "com.apple.mail.plist" file to the folder you made in step 1 by Option-dragging the file. Don't remove the original file from its current location (this file contains your Mail accounts information).
7. Close the Preferences folder.
8. Open the Mail folder.
9. Copy the "MessageRules.plist" file to the folder you made in step 1 by Option-dragging the file (this file contains your Mail rules).
10. Copy the "SmartMailboxes.plist" file to the folder you made in step 1 by Option-dragging the file (you guessed it, this file contains Smart Mailboxes information).
11. Finally, copy the Signatures folder to the folder you made in step 1 by Option-dragging the folder. (Your custom signatures, if you use them, are stored here.)
#manually back up Mail messages (i first did a backup of the MAIN admin account on my external drive so that i made sure i didnt accidentally remove any files... then i manually went into each "inbox"/"outbox"/"drafts" of each account and added each email- emails here are only identified with a unique set of numbers and date/times in the info field- that was not in the MAIN admin account to the copy mail account located on my external drive -yes this was VERY tedious- also i had folders that i had to consolidate so i made sure i didnt miss those)
1. Quit Mail if it's open.
2. From the Finder's Go menu, choose Home.
3. Open the Library folder.
4. Copy the folder "Mail" to your backup location, such as a different volume or burnable disc. Important: Do not remove the Mail folder from ~/Library. If you're backing up to the same volume, hold the Option key as you drag the folder to make a copy instead of moving it (a "+" cursor appears).
once i got all this i took all the files i copied/consolidated on my external drive and replaced all the original files in the new Admin account i created (I have to create a new MAIN admin account because the original main admin account is corrupt the second one also has some of the same issues because i was rushing through copying all of the plist/library files over without inspecting each...)
NEXT
* i forgot all the passwords to my email accounts...
Keychains
Keychains are located in your ~/Library/Keychains/ folder. To get to this file in the Finder, choose Home from the Go menu. Open the Library folder, then open the Keychains folder.
i copied that file and backed it up on my external... also i opened it up and found all the passwords i forgot
so this problem for me is solved...
PS the KeyChain is AWESOME! i use firefox and none of those passwords are saved to the keychain but there is an addon password extractor u can export usernames and passwords from firefox with this addon and ad them to your keychain...

2nd attempt--Cannot Install E-Learning Suite 6.1--Even as New Admin Account

PLEASE HELP ME FURTHER WITH THIS UNRESOLVED TECH TICKET ISSUE
CANNOT INSTALL ADOBE ELEARNING SUITE 6.1
Adobe เคสอัพเดท : 0185404686 : Mohammed U
บัญชี Adobe ของคุณคือ [email protected]
หมายเลขเคสของคุณคือ0185404686
การบรรยายลักษณะเคส:Chat:Installation Help (CH13860513)
You contacted us as you were unable to install e-learning suite. We suggest you to create a new Admin account on your computer and try installing creative cloud desktop from there. Once you are able to install and launch on new admin account you will be able to access it from your normal admin account as well. Refer this link to create new admin account
http://support.apple.com/kb/PH4600
Hello,
Thank you for your reply. However, YOUR solution did not work.
I created a completely new admin account. Everything was fresh -- totally virgin. And, exactly the same occurred. The installer program completed about 50% of its run,and then froze up. It failed to initialize, and I was referred to an onsite help page that has been discontinued ... that is no longer supported.
What can I do?
I have purchased AN EXTREMELY EXPENSIVE DVD from Adobe, had it sent to me in Thailand, and it will not install in my computer.
Please provide me with the technical support that I need.
Thank you.
Neal Davis

Hi There,
Can you confirm your operating system on which you are trying to install e LearningSuite 6.1?
Also confirm the PowerPoint version present on that machine?
Regards,
Ajit

Making non-admin account

I've been using an admin account for everything (no scolding please), but am considering using a non-admin account instead.
Seems to me easiest would be I could simply change it from admin to non-admin, and back again when necessary. Would there be any problems doing it this way?
Or must I create a new, non-admin account and copy / migrate my current home folder from the admin account, and as much else as possible, over? If I have to go the second route, what's the easiest way to do that? Thanks.

Thanks Kiraly, Yeah, I think that's what BD had in mind when he said make sure to have another working Admin account before changing to non-Admin.
I've just been doing a little experimenting. I already have another Admin "test" account. What I've noticed is I can use the password from that one in the "main" working Admin account, but not the other way. Strange. Tried logging in to the "test" account with the "main" account password, but it wouldn't let me. But no problem logging in to the "main" account with the "test" password. In any case, since I've already got another working Admin account, it should be no problem, as you say, to change this one to non-Admin and use the test pword to authenticate when necessary.
*BD, if you're reading this,* you didn't think it would be all that dangerous to keep this one Admin. referring, I suppose, to the low risk of my wreaking havoc to the system files and data. Apart from the issue of my wife also using this account--and I actually don't think she'll do anything bad--isn't the main risk supposed to be a security one? That, navigating with an Admin account, some sort of rootkit, backdoor or keylogger, or whatever, might have unimpeded access to the system itself?

Resetting admin account?

Hi there,
I have some trouble updating iTunes from the admin account I always use; it gets stuck with a spinning wheel while running iTunes preflight script. Creating a second, "virgin" admin account solves the problem but I'd rather stick with the old account name, ID and home directory. Other applications install well, by the way. Obviously, not installing correctly is connected with something wrong in my present admin account. Am I right with this? Is there any kind of account resetting procedure for that purpose?
Thanks,
Joe.

From your description there may be some bad preference files or third-party software conflicts or simply a need for some maintenance. The following may prove helpful.
Repairing the Hard Drive and Permissions
Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Installer menu (Utilities menu for Tiger and Leopard.) After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer. Now shutdown the computer for a couple of minutes and then restart normally.
If DU reports errors it cannot fix, then you will need Disk Warrior (4.0 for Tiger, and 4.1 for Leopard) and/or TechTool Pro (4.6.1 for Leopard) to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
Kappy's Personal Suggestions for OS X Maintenance
For disk repairs use Disk Utility. For situations DU cannot handle the best third-party utilities are: Disk Warrior; DW only fixes problems with the disk directory, but most disk problems are caused by directory corruption; Disk Warrior 4.0 is now Intel Mac compatible. TechTool Pro provides additional repair options including file repair and recovery, system diagnostics, and disk defragmentation. TechTool Pro 4.6.1 is Leopard compatible; Drive Genius is similar to TechTool Pro in terms of the various repair services provided. The current version, 1.5.1, is Intel Mac compatible.
OS X performs certain maintenance functions that are scheduled to occur on a daily, weekly, or monthly period. The maintenance scripts run in the early AM only if the computer is turned on 24/7 (no sleep.) If this isn't the case, then an excellent solution is to download and install a shareware utility such as Macaroni, JAW PseudoAnacron, or Anacron that will automate the maintenance activity regardless of whether the computer is turned off or asleep.
OS X automatically defrags files less than 20 MBs in size, so unless you have a disk full of very large files there's little need for defragmenting the hard drive. As for virus protection there are few if any such animals affecting OS X. You can protect the computer easily using the freeware Open Source virus protection software ClamXAV. Personally I would avoid most commercial anti-virus software because of their potential for causing problems.
I would also recommend downloading the shareware utility TinkerTool System that you can use for periodic maintenance such as removing old logfiles and archives, clearing caches, etc.
For emergency repairs install the freeware utility Applejack. If you cannot start up in OS X, you may be able to start in single-user mode from which you can run Applejack to do a whole set of repair and maintenance routines from the commandline. Note that presently AppleJack is not compatible with Leopard.
When you install any new system software or updates be sure to repair the hard drive and permissions beforehand. I also recommend booting into safe mode before doing system software updates.
Get an external Firewire drive at least equal in size to the internal hard drive and make (and maintain) a bootable clone/backup. You can make a bootable clone using the Restore option of Disk Utility. You can also make and maintain clones with good backup software. My personal recommendations are (order is not significant):
1. Retrospect Desktop (Commercial - not yet universal binary)
2. Synchronize! Pro X (Commercial)
3. Synk (Backup, Standard, or Pro)
4. Deja Vu (Shareware)
5. PsynchX 2.1.1 and RsyncX 2.1 (Freeware)
6. Carbon Copy Cloner (Freeware - 3.0 is a Universal Binary)
7. SuperDuper! (Commercial)
8. Data Backup (Commercial)
The following utilities can also be used for backup, but cannot create bootable clones:
1. Backup (requires a .Mac account with Apple both to get the software and to use it.)
2. Toast
3. Impression
4. arRSync
Apple's Backup is a full backup tool capable of also backing up across multiple media such as CD/DVD. However, it cannot create bootable backups. It is primarily an "archiving" utility as are the other two.
Impression and Toast are disk image based backups, only. Particularly useful if you need to backup to CD/DVD across multiple media.
Visit The XLab FAQs and read the FAQs on maintenance, optimization, virus protection, and backup and restore.
Additional suggestions will be found in Mac Maintenance Quick Assist.
Referenced software can be found at www.versiontracker.com and www.macupdate.com.

Delete original admin account - applications now owned by 'unknown'

This has come up in the past and must be kind of a common question. Let’s say you have a computer that you want to give to your kids. All you want to do is create a new user admin account and then delete yours. Can’t this be done safely without permissions of applications getting all weird? I did this and all the applications now have owner set to 'unknown'. I was hoping they would say the name of the new and only user on the computer. Can and/or should I fix this?

Use the instruction on this page to change the UID of your account; if you haven't changed it manually, your account's current UID will be 502 and you want to change it to 501.
(15207)

Can't login to local NON-admin accounts-Directory Access set to server

I have a strange problem on a set of laptops that I cannot resolve and am hoping someone can help me.
Here is the issue:
I have a set of building laptops (PowerPC, OSX.4.11) that seemingly will not "search locally" in the authentication process. The logins seem to work fine for NETWORK logins to our Open Directory Master xserve, but these machines will not login to any LOCAL non-admin accounts. The local root and local admin account logins do, however, work fine. ?? The remainder of the building computers (Intel iMacs OSX.4.11) appear to have the exact same settings and login fine both locally and via the network home directories.
I have tried the following:
Deleted DirectoryService preferences folder (MacintoshHD-->Library-->Preferences->DirectoryService)
Deleted the mcx cache in Directory Access
Tried adding a new non-admin user to test (still will not login)
Removed and re-created LDAP configuration (all set to custom)
Tried setting the LDAP to the automatic settings ("Add DHCP-supplied LDAP servers to automatic search policies")
Disabled all network connectivity (turned off Airport and disconnected the ethernet cable), still cannot login to local accounts
Tried to bind in LDAP configuration (when I did bind the machine, it would no longer authenticate to the network authentication server, so I did an "unbind" and restarted and it went back to performing the network logins, but still will not login to local non-admin accounts).
Reset passwords in System Prefs and also re-typed them in NetInfo Manager
Deleted login keychains
Deleted mcx.plist
Reinstalled the OS from disk and local logins worked TEMPORARILY--UNTIL I set the LDAP directory access to authenticate to our server (which I also need for the network logins to work),then, the issue started again.
*Same results with both ethernet and wireless connectivity enabled.
*Note: I also manage these local accounts via WGM (installed on the local machine) and even tried disabling that and still no luck.
Please help...I have spent hours and hours trying to find a solution and nothing seems to work! What am I missing??

Mostly just a bump...
How about that .local extension, or trailing / ?

Can't Login to Local Admin Account

Over the weekend I rebuilt an OS X 10.4.10 Server.
I created a local admin account, then set up DNS & OpenDirectory Master. I created some admin accounts in the domain.
I also set up a Panther Server as "Connected to a Directory System" and joined it to the Kerberos server on the 10.4 server.
All the clients are connecting to the domain, and everything is working except I can't log in to the 10.4 server with the local directory accounts anymore. I have created a new account in the local directory and tried changing the passwords, but nothing works for logging into the local directory admin accounts. With the exception that I am able to SSh into the local directory accounts.
Any suggestions?
Message was edited by: iGary

Does this help?
http://docs.info.apple.com/article.html?artnum=307005
LN

How to Reset Password of User while not connected to Domain using Local Admin Account

How to Reset Password of User while not connected to the Domain using Local Admin Account
(I have the use of a local admin account), and I want to help a user reset their password who has logged in the PC and had their credentials cached, but forgot this password.
In Local Admin Account :
When I go to Control Panel, users, users, manager user ; I cannot see any users in this window except the local admin account, and, so I cannot reset a user password this way.
When I go to lusrmgr.msc, then users ; the local admin account will display only.
If I go to command prompt and type "net user", this will not display any users who have logged in to the computer, and so I cannot use "net user" to reset a password.
I don't want to use any disks, 3rd party programs, or create a VPN connection to the domain. I just want to help a user who calls in and forgets their password.

Hello Keith,
I know this is an old thread but I'm trying to better understand how I could change the domain password while not on the network. What I'm getting from your post is that you:
1. Create a local user account (not a domain user)
2. Login with that local user account
3. Connect to the VPN while logged in as a local user
4. Log out of the local account and login with the domain credentials
Now, my question is based on the assumption that the password created on the local account is the same password that one will use to login to the domain account? Also, is the local user account the same as the domain account?
Thanking you in advance!

Create local account with no write access on mass computers?

I'm running a bunch of iMacs (10.6.8 & 10.8.2) on a network managed by an Xserve (10.6.8) at a small university. We recently purchased several Adobe suites and they apparently do not work when logged in with a network account. So, for at least a short term work-around, how do I easily create a local account on all the computers that does not have write priviledges to the local drives (or at least limited write--there my need to be some system folders that Adobe needs to write to locally, but not sure yet)? I can use a network drive for saving projects (even though Adobe told me that wouldn't work...), I just don't want students to be able to manage, add/remove programs, or save their projects locally.

Hello kikkos,
Please take a look at the following articles about local Users and Groups.
Local user accounts
http://technet.microsoft.com/en-us/library/cc753450.aspx
Default local groups
http://technet.microsoft.com/en-us/library/cc771990.aspx
I can’t find account or account group can have full control to the computer but have no permission to edit the local admin account.
Best regards,
Fangzhou CHEN
Fangzhou CHEN
TechNet Community Support

TS not enabling local admin account

Hi all
I am running sccm 2012 r2 and am having trouble with a ts not enabling the local admin account. WHat i am trying to do with the ts is add the machine to a workgroup, dont install config manager client and enable the local admin account with a password set
in the ts. It all works ok except for the local admin account remaining disabled.
Any ideas greatly appreciated.
Thanks
SCCM is a beast

As Torsten already said, the Task schould not be removed. (" This task sequence step is a required part of any operating system deployment."
http://technet.microsoft.com/en-us/library/hh846237.aspx#BKMK_SetupWindowsandConfigMgr) If you want to remove the CM Agent you could execute "ccmsetup.exe /uninstall" at the end of the TS.

Creating local client's admin account in ldap

Similar Messages

Maybe you are looking for