add Mac ssh domain group

#!/bin/sh

echo "Hello, world!"

# Create local group to for ARD access
sudo dscl . -create /Groups/ARD_ADMIN
sudo dscl . -create /Groups/ARD_ADMIN PrimaryGroupID "530"
sudo dscl . -create /Groups/ARD_ADMIN Password "*"
sudo dscl . -create /Groups/ARD_ADMIN RealName "ARD_ADMIN"
sudo dscl . -create /Groups/ARD_ADMIN GroupMembers ""
sudo dscl . -create /Groups/ARD_ADMIN GroupMembership ""

# add ad group to local ARD access group
sudo dseditgroup -o edit -a "NT-NSU\MacRemoteAdmin" -t group ARD_ADMIN

#Give perms to ARD to group
cd /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/
sudo ./kickstart -activate -configure -access -on -privs -all -users ARD_ADMIN -restart -agent

#allow logins to ARD client
cd /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/
sudo ./kickstart -configure -clientopts -setdirlogins -dirlogins yes

# enable ssh access
sudo defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool NO


if [ "`dseditgroup com.apple.access_ssh`" == *Group not found* ]; then
  echo "ssh group does not exist. Creating..."
  sudo dseditgroup -o create -q com.apple.access_ssh
fi

#sudo dseditgroup -o create -q com.apple.access_ssh
#sudo dseditgroup -o edit -a ARD_ADMIN -t group com.apple.access_ssh
sudo dseditgroup –o edit –n . -a "NT-NSU\MacRemoteAdmin" -t group com.apple.access_ssh