Enable directory services group authorization for Remote Desktop
You can manage Remote Desktop authorization by using groups on a directory server. To enable group-based authorization for Remote Desktop access, create the groups in your directory services master directory domain. You must have access to your organization’s users and groups server.
In Remote Desktop
, create groups with Remote Desktop access privileges.Add users to the groups.
Make sure the client computers to be administered are bound to your directory system.
Set the clients to use directory authorization by using the Change Client Settings feature or by creating a custom installer.
For information, see Execute commands remotely.
Have the client computers join a Network Account Server (also known as “bind to a directory server”) by doing the following steps. (You might need to authenticate as a user with administrative privileges on the computer to change its network account server settings.)
You might need to have to authenticate as a local user administrator to change the network account server settings.
Choose Apple menu > System Preferences, then click Users & Groups.
Select Login Options.
Click Join, enter the domain name of the directory server, then click OK.