Active Directory

The Active Directory domain to join.

The user name of the account for the domain.

The password of the account for the domain.

The client's identifier.

The organizational unit to add the joining computer object to.

If 'true', the system enables the 'ADCreateMobileAccountAtLogin' key.

Default: false

If 'true', the system creates a mobile account at login.

Depends on: ADCreateMobileAccountAtLoginFlag ∈ [true]

Default: false

If 'true', the system enables the 'ADWarnUserBeforeCreatingMA' key.

Default: false

If 'true', the system enables the warning before creating the mobile account.

Depends on: ADWarnUserBeforeCreatingMAFlag ∈ [true]

Default: false

If 'true', the system enables the 'ADForceHomeLocal' key.

Default: false

If 'true', the system forces a local home directory.

Depends on: ADForceHomeLocalFlag ∈ [true]

Default: false

If 'true', the system enables the 'ADUseWindowsUNCPath' key.

Default: false

If 'true', the system uses the UNC path from Active Directory to derive the network home location.

Depends on: ADUseWindowsUNCPathFlag ∈ [true]

Default: false

The network home protocol to use: 'afp' or 'smb'.

Default: "smb"

Range: AFP (afp), SMB (smb)

If 'true', the system enables the 'ADDefaultUserShell' key.

Default: false

The default user shell.

Depends on: ADDefaultUserShellFlag ∈ [true]

Default: "/bin/bash"

If 'true', the system enables the 'ADMapUIDAttribute' key.

Default: false

The map UID to attribute.

Depends on: ADMapUIDAttributeFlag ∈ [true]

If 'true', the system enables the 'ADMapGIDAttribute' key.

Default: false

The map GID to attribute.

Depends on: ADMapGIDAttributeFlag ∈ [true]

If 'true', the system enables the 'ADMapGGIDAttributeFlag' key.

Default: false

The map group GID to attribute.

Depends on: ADMapGGIDAttributeFlag ∈ [true]

If 'true', the system enables the 'ADPreferredDCServer' key.

Default: false

The preferred domain server.

Depends on: ADPreferredDCServerFlag ∈ [true]

If 'true', the system enables the 'ADDomainAdminGroupList' key.

Default: false

The list of Active Directory groups with admin access.

Depends on: ADDomainAdminGroupListFlag ∈ [true]

If 'true', the system enables the 'ADAllowMultiDomainAuth' key.

Default: false

If 'true', the system allows authentication from any domain in the namespace.

Depends on: ADAllowMultiDomainAuthFlag ∈ [true]

Default: false

If 'true', the system enables the 'ADNamespace' key.

Default: false

The primary user account naming convention; either 'forest' or 'domain'.

Depends on: ADNamespaceFlag ∈ [true]

Default: "domain"

Range: domain, forest

If 'true', the system enables the 'ADPacketSign' key.

Default: false

The packet signing policy.

Depends on: ADPacketSignFlag ∈ [true]

Default: "allow"

Range: allow, disable, require

If 'true', the system enables the 'ADPacketEncrypt' key.

Default: false

The packet encryption policy.

Depends on: ADPacketEncryptFlag ∈ [true]

Default: "allow"

Range: allow, disable, require, ssl

If 'true', the system enables the 'ADRestrictDDNS' key.

Default: false

An array of strings that represent the interfaces allowed for dynamic DNS updates, such as en0 and en1.

Depends on: ADRestrictDDNSFlag ∈ [true]

If 'true', the system enables the 'ADTrustChangePassIntervalDays' key.

Default: false

The number of days before requiring a change of the computer trust account password. Set to '0' to disable the feature.

Depends on: ADTrustChangePassIntervalDaysFlag ∈ [true]

Default: 14

The directory service description.

An active directory group

An interface name which is allowed to make DDNS updates