Take steps to secure Active Directory: In the remediation steps above from Microsoft, set the registry key for PacRequestorEnforcement to “1” and test that macOS devices are able to communicate to the domain controller.However, many organizations with shared devices utilize binding to AD for centralized user account management. Evaluate your environment: If your organization does not require its macOS fleet to bind to Active Directory domain controllers, no further action is necessary.While Microsoft provided a dditional details regarding the issue, as well as, remediation guidance on their support website, a dministrators immediately discovered a subsequent issue stemming from taking corrective action: remediated servers no longer allowed macOS to bind itself to Active Directory. The issue is a security bypass vulnerability that affects the Kerberos Privilege Attribute Certificate, or PAC. This vulnerability may allow potential attackers to impersonate domain controllers. In the Fall of 2021, Microsoft identified a security issue present in Active Directory Domain Services (ADDS) known as CVE-2021-42287.

Add mac to active directory domain