Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

At the login screen, how do I login to a domain account?

For example, on Windows the username might be something like louis@contoso.local, where the domain is contoso.local.

Edit: The AD username happens to be the same as a local username.

share|improve this question

You need to set up Network Account Server settings in Preferences > Users & Groups > Login Options.

In the company I work for I can either use DOMAIN\username or username@DOMAIN when logging in to the AD on from a Windows Machine, but on the Mac this is not required. I just type in username and my AD password, and it logs me in.

share|improve this answer
What if the AD username is the same as a local username? – Louis Jul 23 '11 at 17:22

I've been having the same issue today and I believe I've resolved this (Yosemite).

I've got my local user ( and my domain user (domain.local\ I've added to OD auth correctly without issue.

When I attempt to log in with my domain user (domain.local\ it rejects me for an invalid password. I tried out the password for my local user, and it worked, but threw an error when loading the desktop.

I've right clicked on the user under "Users & Groups" and gone into "Advanced Options" (which I found completely by accident). I then modified my "Full Name" - which was - to be

After rebooting the machine, all worked and I could log into the domain user with the correct password without issue.

One thing to note here is that I didn't have to change the "Username" in advanced options here. There may be ramifications to this - see this Apple support KB for more information.

share|improve this answer

You can control this by setting the search order for each domain in the forest. This can by found on the Mac by going to: System Prefs->Users & Groups->Login Options->Click Edit next to Network Account Server Then Open Directory Utility and Click on Search Policy

share|improve this answer

mwidman has given you the answer for this.

If you wish to log in to your Active Directory domain account rather than the local account then precede the account name with the AD domain name and a .

So in your case contoso.local\louis

This assumes that you have already bound the Mac to Active Directory. I am also wary of using Spider-moe's solution - as a sysadmin I never like altering the search policy order.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.