Changing the role of Mac on Windows environment

[Anonymous]

I integrate a Powermac in the AD Domain at work.
My mac appears to be Domain Controller but I would like that it appears only as “Client”.
I cannot maintain this new “Domain Controller” ’cause many policies ask to me to avoid other server than the 2K, validated by other people.

How to change the settings of the network? It must be Client of AD, only…

Thanks,

Marco

[sketch]

There is a bug in the reporting feature of the Users and Groups plugin. If you do a search for a mac it will report back that it’s a DC, when actually it’s only a workstation. There is an attribute in AD called “userAccountControl” that sets what an account is.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q305144

Windows server reports back anything that has a value over 4096 as a domain controller, and the AD plugin inputs itself as a higher value than 4096.
Microsoft does have a hotfix for this, (thanks to our badgering,) but you need to contact them to get it.

This isn’t a show-stopper. If you view the properties of your Mac in the User and Groups MMC, and look at the role, you’ll see it’s not a domain controller.

If it is a domain controller, well you need to deal with that, but I’m betting it’s not actually.

[sketch]

http://support.microsoft.com/default.aspx?scid=kb;en-us;883480

[Author]

Posts