Use Active Directory tools to manage group memberships

OS X includes a Directory Editor that will let you view and manipulate attributes in an external directory. However, you cannot use this tool to edit group memberships for Active Directory users.

This article has been archived and is no longer updated by Apple.

To change group memberships for Active Directory users or groups, use Active Directory-specific tools.

One such tool is the Active Directory Users and Computers MMC snap-in, which you can find more information about on this Microsoft page.

The dscl or dseditgroup command-line tools can be used to view Active Directory group membership, but not to edit group membership.

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Date: