Joining a macOS Client to Directory Services

Configure DNS, bind a Mac to Active Directory, enable network-user login, and mount an SMB share served by the gateway.

This walkthrough covers the steps to join a macOS device to the Uplevel Directory Service, allow domain users to sign in at the login window, and mount a network share from the gateway.

Configure DNS

The Mac needs to resolve the domain controller before it can bind, so point DNS at the gateway first.

  1. Open System Settings.
  2. Click Network and select the active connection.
  3. Under DNS, add the gateway/domain IP address.

Bind to Active Directory

  1. Back in System Settings, open Users & Groups.
  2. Under Network Account Server, click Edit.
  3. Click Open Directory Utility….
  4. Click the lock icon and enter local administrator credentials to unlock changes.
  5. Select Active Directory and enter the AD domain. Click Bind.
  6. Enter the directory username and password when prompted and click OK.
  7. If macOS asks “Join existing account?”, click OK.

The domain is now bound.

Allow network users to sign in

  1. Back in Users & Groups, enable Allow network users to log in at login window.
  2. Click Options, then click + to add users.
  3. Choose either Allow network users (open to everyone in the domain) or Only these network users (an explicit allow-list).

Sign in as a domain user and mount the share

  1. Sign out of the current macOS user account.

  2. Sign back in as the AD user.

  3. In Finder, choose Go › Connect to Server.

  4. Enter smb:// followed by the gateway IP (or domain) and the share name, for example:

    smb://192.168.1.10/SharedFolder
    
  5. Click Connect, then click Connect again if prompted.

The mounted share appears under Locations in Finder.

Related articles