AAPP-4948: macOS High Sierra not honoring the ADDomainAdminGroupList key in the Directory profile




Version Identified

macOS 10.13+



Workspace ONE Administrators utilizing macOS 10.13 devices may find that, when a macOS 10.13 is bound to AD through a Directory profile, specified user groups under the Administrative tab are not honored. End users whose accounts are in the specified groups under the Administrative tab, will not be granted administrative privileges upon logging in. The users will instead be granted standard user privileges.


Fix Versions

We have informed Apple of the issue and this article will be updated once we confirm a resolution in iOS.  If you have Apple Care Support you may wish to reach out directly to Apple to learn more details around the status of this issue.

Other Languages: 日本語

Have more questions? Submit a request


Article is closed for comments.