In this video, we're going to join Remax to active directory, this time using a mobile config profile.
So to do that, we need to first create a mobile config profile.
So let's go ahead and we're going to make a mobile mobile config profile for Mac OS and let's give it
a name of Join Active Directory.
And for the serial number, we can just put in any arbitrary number.
So let's go ahead and click on this device and then go to edit.
And let's click directory for Directory Services and Configure.
Directory type is going to be active directory and under server hostname, we're going to go ahead and
put our domain name and user name.
We're going to go ahead and put the name of an account that can join Active Directory and in password,
we're going to enter that user's password.
Client IDs, you remember, is the hostname of the computer.
We're going to leave that blank because it's going to auto populate and in the organizational unit,
what we're going to do is we're going to go ahead and copy and paste the organizational unit that we
use from our script and put it here.
Now, what I want to do is I want to take this same bracket and I'm going to go ahead and turn it into
a percent sign and do the same thing for this bracket, because now we have something that we can change
the name of.
So under user experience, we're going to go ahead and click, create mobile account login and we'll
explain this later.
And under administrative, let's go down to that password trust interval.
And I'm going to change this to zero like we had it in our script.
But again, you can leave it to 14 if everything in your organization is going to be hard wired.
So now let's click, OK, and save, and now we'll have the ability to download our mobile config profile.
Now, once you download it, it's going to try to import it into your computer and just go ahead and
hit, cancel and quit out of system preferences.
Now that we have the mobile config profile created, I'm going to go ahead and teach you how to import
that into a computer using Apple remote desktop.
So the first thing we want to do is we're going to want to copy the mobile config profile to our target
computers, so let's go ahead and take a look at this job.
And so it's using the built in copy items job to copy the mobile config profile to the target.
So how we add the items is as either drag and drop or I'll go ahead and delete this and click plus,
and then we locate where a mobile config profile is now in profile manager puts it in your downloads
folder and for production, I would move it someplace else entirely than your downloads folder and then
you'll double click on it and then it'll bring it into place.
Now, something to note is if you move this file at any point time, then this job will no longer work
and we'll cover what to do about that in an upcoming section.
So when it comes to delivering files to a computer that aren't for the end users, things that are going
to just be used and deleted, I like sending them to the temp folder.
So that's what I'm going to do.
I'm going to copy the mobile conflict folder.
So let's go ahead and hit save and let's go and click all over computers and drag and drop them to the
copy job and copy them out.
Now we're going to take her to computers and we're going to put them in the job to join them to the
public or to join the domain using the mobile config profile.
But first, let's go ahead and take a look at this.
So the first section should be familiar.
It's the same as in the script.
We're defining the location and then the next section we're going to replace the token.
And if you remember, the token is that percent location percent.
And we're going to replace that with the variable location.
Inside the file, temp settings for Joint Active Directory mobile config profile, which is the file
that we copied.
So we're copying a file with a token replacing the token with New York or L.A. and then we're going
to import the profile profiles for import for the file path.
We're going to import the profile.
And then when it's done, we're going to go ahead and delete the profile.
So let's go ahead, save our job.
And now let's go ahead and run the job.
All right, so let's bring up our active directory, and we know that before these jobs finished that
the computers frequently show up.
So here's our New York computer and see the map.
It showed up yet.
There it is.
OK, so they both showed up.
Now the job is still running, so maybe not everything is done.
But let's go to New York.
It seems to be ahead and let's go to system preferences.
And you can see now we have a profile section.
Here is the profile by name settings for Active Directory.
And if we go to organizational unit, you could see that it does say New York and it doesn't say percent,
location percent.
And if we go down to the L.A. one, we're going to find the exact same thing.
But it says L.A..
All right.
So the job finished.
That's good.
So what I want to do now is I want to show you how to remote or to remove the profile.
So let's go to a terminal.
And the command for that is going to be pseudo profiles, hyphen capital L for list.
And that's going to list all the profiles on our machine, so what we want to do is we want to copy
this profile.
And we're going to go ahead and open that up in a job called remove joined domain profile, and I've
already done it, but you can see that we have profiles and then remove and then we've got that long
name for the profile.
So let's go ahead and hit save and make sure that these are both of our computers are set.
And now let's go ahead and run them.
And it's running and it's already done on New York.
So let's go to New York and let's refresh.
And you can see it's gone and it's succeeded on L.A. So L.A. should be gone.
All right.
OK, it's gone and so we can see that Profiles is now missing over here in system preferences and if
we go here, profiles is missing.
And if we go to pseudo profiles, Elle, there is no configuration profiles installed on this system.
So we've deleted the profiles and thus I'm joining our computers from the domain.