This article has been archived and is no longer updated by Apple.

Use Active Directory tools to manage group memberships

OS X includes a Directory Editor that will let you view and manipulate attributes in an external directory. However, you cannot use this tool to edit group memberships for Active Directory users.

To change group memberships for Active Directory users or groups, use Active Directory-specific tools.

One such tool is the Active Directory Users and Computers MMC snap-in, which you can find more information about on this Microsoft page.

The dscl or dseditgroup command-line tools can be used to view Active Directory group membership, but not to edit group membership.

Contact the vendor for additional information.

Published Date: