Active Directory

Windows

Prior to joining a workstation to the domain you must create an account in your OU for the workstation. Using a domain account that is a member of your OU Admin group, launch "Active Directory Users and Computers" and perform the following steps:

1. Navigate to your OU.
2. Right-click the OU.
3. Click on New.
4. Click Computer.
5. Enter the NetBIOS name of the workstation you want join to the domain in the "Computer name:" field.
6. Click Next.
7. Click Next.
8. Click Finish.
9. Allow about 15 minutes for changes to replicate to all domain controllers.

The workstation's NetBIOS name must be the same as the machine account just created in the above steps prior to doing the following steps.

If you are joining a Windows XP workstation:

1. Log on to the workstation with the local administrator account.
2. Click Start.
3. Right-click My Computer.
4. Select Properties.
5. Select the Computer Name tab.
6. Click Change...
7. Select the Domain radio button.
8. Enter:
   uark.edu
   in the Domain: field, and click OK.
9. Enter the username for a domain account that is a member of your OU Admins group in the form:
   username@uark.edu
10. Enter the password, and click OK.
11. When you get the "Welcome to the uark.edu domain." message, click OK.
12. Click OK to the restart message and in the System Properties dialog box and click Yes to restart the workstation.
13. When the computer restarts, log on with the local adminstrator account.
14. Add the appropriate domain users to the appropriate local groups (according to your need).

If you are joining a Windows Vista or Windows 7 workstation:

1. Log on to the workstation with the local administrator account.
2. Click the Start button.
3. Right-click Computer.
4. Select Properties.
5. Under the Computer Name, domain... sections, click on Change Settings.
6. Click Change....
7. Select the Domain radio button.
8. Enter:
   uark.edu
   in the Domain: field.
9. Click OK.
10. Enter the username for a domain account that is a member of your OU Admins group in the form:
    username@uark.edu.
11. Enter the password and click OK.
12. When you get the "Welcome to the uark.edu domain." message, click OK.
13. Click OK to the restart message and in the System Properties dialog box and click Yes to restart the workstation.
14. When the computer restarts, log on with the local adminstrator account.
15. Add the appropriate domain users to the appropriate local groups (according to your need).

Macintosh

Note: If you are an OU admin, pre-create your computer names in the appropriate group. If you are not the OU admin, find the appropriate person in your area and ask that they create the necessary computer names in your OU. If the computers you want to bind to AD are not pre-created in your OU, they get dumped into a generic computer container.

Basic AD Authentication on Clients

1. Log in locally with an administrator account and launch Directory Access.
2. Click Go, Utilities, Directory Access.
3. Verify that the Active Directory plug-in is checked and select Configure.
   Enter the following information:
   AD forest: -Automatic-
   AD Domain: uark.edu
   Computer ID: "one of your pre-created computer names"
   Optional items: Make no changes
4. Verify that everything is correct and click the Bind button.

If at any time you are prompted by Directory Access for a username and password, supply the Local Administrator's username and password. If you are prompted for the Network Administrator's password, supply the OU Administrator's username and password. Often you will have better results if you use the entire email address (username@uark.edu) for the username or gacl\username (where "username" is the actual username). If asked to join an existing account, click Join existing account.

After you are bound to AD, you will need to set the Login options.

1. Click System Preferences, Accounts.
2. Click Login Options.
3. Select Display login Window as: Name and Password.
4. Verify that automatically log in as option is NOT on.
5. Restart the client computer and log in using an AD network account.