Enabling Directory Services Group Authorization

In order to enable group-based authorization for Apple Remote Desktop access, you create the appropriate groups in your Directory Services master directory domain.

To complete this task, you need to be the Directory Services administrator and have access to your organization's users and groups server.

Use one of the methods in the section Creating Administrator Access Groups to create groups with Apple Remote Desktop access privileges assigned to them.
Add users to the groups.
Make sure the client computers to be administered are bound to your directory system.
Set the clients to use directory authorization by using the Change Client Settings feature or make a custom installer.
Choose to enable directory-based administration on the clients using Directory Utility (in /Applications/Utilities/).