About Active Directory names in macOS

When you bind an macOS client to Active Directory, use names that follow these standards.

This article has been archived and is no longer updated by Apple.

To make sure that the computer binds with System Preferences, Directory Utility, or dsconfigad, use computer names that:

  • are less than 16 characters long.
  • have only alphanumeric (A–Z, a–z), numbers (0–9), - (dash) and/or _ (underscore) characters.

Don't enter a longer computer name or invalid characters. If you do, a client might not bind to Active Directory. Or, macOS might bind to Active Directory with a truncated computer name. 

The underscore character is valid in host names but not in a DNS domain name. If an Active Directory domain name has an underscore, binding and services won't work.

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Risks are inherent in the use of the Internet. Contact the vendor for additional information. Other company and product names may be trademarks of their respective owners.

Published Date: