When joining a Mac to Active Directory, you can specify domain users or groups to which you wish to grant administrator rights to the computer. This is done in Directory Utility by ticking the “Allow administration by:” box and entering a domain\username pair: Alternatively, a simple command performs the same...
