Teacher Changing AD passwords on a Mac

[rckngslnd]

Hi

 

We currently have a room of Macs we use for Music, all binded to AD so children and staff use AD credentials to login. Currently teacher on windows machine use a program based on .Net to change students password, what i would like to do something similar on the macs but for the life of me i cannot find anything, anyone got any ideas??

[Face-Man]

You may well of though of this but there are several ways to run windows software on a mac using Virtual machines etc. There are some ideas her about what might work

https://uk.pcmag.com/virtualization/135790/get-the-best-of-both-worlds-how-to-run-windows-apps-on-your-mac

[Mrpower]

Hello

This application made by Two Canoes might help. Xcred, which will allow you to change the login window to allow Azure accounts to login. One feature that might help is password syncing. It also supports google g-suite accounts as well. Supports MacOS 11(Big Sur) and MacOS 12 (Monterey) if your Macs are on either of these two operating systems you could give it a try.

https://twocanoes.com/products/mac/xcreds/

[rckngslnd]

thanks for replied, hopefully looking for easy to use Mac based applications if possible, and free would be nice

[Brimstone]

Jamf Connect all the way...

 

https://www.jamf.com/lp/en-gb/mac-authentication-jamf-connect/?

[rckngslnd]

thanks, using mosyle so don't really want to change

[localzuk]

Do you currently have Azure AD, with password write-back enabled via Azure AD Connect at all?

 

If you do, you could use Microsoft's MyStaff tool. https://learn.microsoft.com/en-us/azure/active-directory/roles/my-staff-configure

 

I have it set up here, as a pilot, with one of our more capable members of IT staff and it appears to work well.

[Brimstone]

thanks, using mosyle so don't really want to change

Jamf Connect has nothing to do with Jamf Pro MDM.....

[rckngslnd]

Do you currently have Azure AD, with password write-back enabled via Azure AD Connect at all?

 

If you do, you could use Microsoft's MyStaff tool. https://learn.microsoft.com/en-us/azure/active-directory/roles/my-staff-configure

 

I have it set up here, as a pilot, with one of our more capable members of IT staff and it appears to work well.

 

We do, i have a look intot this

[localzuk]

We do, i have a look intot this

The way we do it here is to set up Administrative Units with dynamic membership. Then give that administrative unit "Password Administrator" roles to whoever needs to be able to change passwords.

 

We're a Trust, so do this based on the schools, but you could theoretically split them any way you want.