Edit Active Directory user accounts and other records in Directory Utility on Mac
You can use Directory Editor to make changes to user accounts, group accounts, computer groups, and other records in an Active Directory domain. You can also use Directory Editor to delete records in an Active Directory domain.
If you extended the Active Directory schema to include standard macOS record types (object classes) and attributes, you can use Directory Editor to create and edit computer groups in the Active Directory domain.
To create user or group accounts in an Active Directory domain, use the Microsoft Active Directory administration tools on a Windows server administration computer.