Specifications
Chapter 8 Advanced Directory Client Settings 171
7 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
8 In the list of services, select Active Directory and click the Edit (/) button.
9 If the advanced options are hidden, click Show Advanced Options.
10 Click Administrative.
11 Select “Allow authentication from any domain in the forest.”
If you select “Allow authentication from any domain in the forest,” you can add the
Active Directory forest to the computer’s custom search policies for authentication
and contacts.
When you add an Active Directory forest to a custom search policy, the forest appears
in the list of available directory domains as “/Active Directory/All Domains.” (This is the
default setting.)
If you deselect “Allow authentication from any domain in the forest,” you can add
Active Directory domains individually to the computer’s custom search policies for
authentication and contacts.
When you add Active Directory domains to a custom search policy, each Active
Directory domain appears separately in the list of available directory domains.
12 Click OK.
13 After selecting “Allow authentication from any domain in the forest,” change the
custom search policy in the Authentication pane and Contacts pane to include the
Active Directory forest or selected domains.
For more information about changing a custom search policy, see “Dening Custom
Search Policies” on page 129.
Unbinding from the Active Directory Server
If the computer is using Directory Utility’s Active Directory connector to bind to an
Active Directory server, you can unbind the computer from the Active Directory server.
You can forcibly unbind if the computer can’t contact the server or if the computer
record has been removed from the server.
To unbind the computer from the Active Directory server:
1 Open System Preferences and click Accounts.
2 If the lock icon is locked, unlock it by clicking it and entering the name and password
of an administrator.
3 Click Login Options, then click Edit.
4 Click Open Directory Utility.