Remote Desktop cannot use Active Directory Groups for management

After enabling directory-based administration, Remote Desktop may show an "Access Denied" status field if an Active Directory group is used for Directory Services authorization.

Symptom

When following the instructions listed in the Remote Desktop 3 Admin Guide to enable access using Directory Services, if the Administrator Access Group used resides in Active Directory then members of that group may be unable to administer the Remote Desktop clients.

Solution

Option 1

1. Bind an Open Directory Master server to Active Directory.
2. Create Remote Desktop management groups in Open Directory.
3. Add Active Directory Users or Groups to the Open Directory group.
4. Bind the client systems to both Active Directory and Open Directory.

Option 2

1. Create Remote Desktop management groups in the local NetInfo database on each client.
2. Add Active Directory Users or Groups to the local group.