Binding Macs to Active Directory - Description Information

[pcgolfer85]

I am looking for a way to have a Mac that is bound to Active Directory report it's serial number and have it populate the description field in AD. Has anyone successfully made this work? Thanks

 

[pcgolfer85]

Like this: http://community.spiceworks.com/scripts/show/1406-automatically-fill-the-computer-description-field-in-active-directory

But I need it to work for Macintosh machines.

 

[satcomer]

What is you Active Directory running on? Is Windows Server 2008s2 or better? I ask because since 2008s2 Macs join Active Directory just well (it was the version when Apple bought Microsoft Active Sync).

Plus read the Apple document OS X Mavericks: Join your Mac to a network account server.

Also take a look the blog post Binding OS X to an Active Directory Domain for User Authentication.

 

[SlCKB0Y]

A bash script could be written to get the serial number, join the machine to the domain, and then update the required attribute.

Hints:

1. Get the serial#

system_profiler SPHardwareDataType | grep "Serial Number" | rev | cut -d " " -f1 | rev

2. Join to the domain
https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/dsconfigad.8.html

3. Update attribute
https://developer.apple.com/library/mac/documentation/Darwin/Reference/Manpages/man1/ldapmodify.1.html

Obviously if the hosts are already joined to the domain skip step (2).