0
votes
0answers
10 views

Best practice for changing AD domains on MAC, Mountain Lion & Mavericks?

We are changing domain name in our company. I have over 3000 users, that are local and remote, I need to able to change their domain on 10.8.5 (Mountain Lion) & 10.9.5 (Mavericks). I am hoping ...
0
votes
1answer
29 views

Bind Secondary Groups to Active Directory w/ Unix Extensions

I'm running Windows Server 2012 R2 w/ Active Directory and Unix Extensions. I have several linux/bsd hosts already connected to the domain via ldap and mapping the uid/gid/secondary groups properly. ...
0
votes
1answer
22 views

Change account profile photo on network account

We have recently joined three iMacs to our Active Directory domain. I would like to set the account profile photo, however this seems to be disabled for network accounts (I can set it for local ...
0
votes
0answers
30 views

How to provide password to dsconfigad without specifying it from command line?

It seems that dsconfigad allows you to specify the password using -password XXX and if you do not specify it, it will ask you to type the password. I tried the usually bash approach with dsconfigad ...
0
votes
1answer
318 views

Solving: Unable to add server. The plugin encountered an error processing request. (10001)

How do I join an Active Directory domain when I get the 10001 error? What is the real cause of the failure? This question is about the famous failure to join an Active Directory from OS X which seems ...
1
vote
1answer
34 views

Unable to toggle Time Machine on

Have been backing up an iMac to Time Machine on an USB drive for some time. I now find that in the System Preference for Time Machine the toggle for OFF/ON is grayed out and cannot be shifted to the ...
3
votes
1answer
2k views

Unable to create Mobile Account on AD Connected Mavericks Machine

Whenever I try to login as an AD user to an OS X Mavericks Macbook Pro it says unable to create mobile account. I do have the AD settings set to create a mobile account on login so that is correct but ...
0
votes
0answers
85 views

Is it possible to allow non-Domain Admins to bind to Active Directory?

Active Directory allows non-domain admins the ability to join Windows computers up to 10 times (by default). However, this does not seem to apply to OSX. We've seen that only Domain Admins or ...
2
votes
1answer
792 views

How to unbind from active directory while preserving a user account?

My account is associated with an active directory of a previous company i was working at. What is the best way to unbind my account from the AD without losing my files? I have admin access to the ...
1
vote
2answers
667 views

Enable SSH access for AD admin accounts

I have the need to configure SSH access for a AD service account on a fleet of Macs. I can't make the account a local account as the password for the service account cycles often. The end goal is to ...
0
votes
1answer
271 views

Where to configure the default user group for file/directory creation?

I would like to configure the default group for any file or directory which is created by my user. I am not sure where to start. Could somebody point me the right direction? My user lives in Active ...
1
vote
1answer
631 views

OSX 10.8 Contacts can't access Active Directory 2003 via LDAP

I've recently upgraded to OSX 10.8 and have discovered that the Contacts Application can no longer access our Active Directory 2003 domain via LDAP. I have confirmed that the exact same settings work ...
1
vote
4answers
2k views

After binding Mac to AD, first login successfully creates mobile account and logs in, after that next login locks AD account

Configuration: Mac OS X 10.7 and 10.8 Active Directory Server 2008 R2 Binding using AD Plugin or dsconfigad -add mydomain -username myuser -ou "OU=Computers,OU=Sites,OU=Mysite,DC=mycompany,DC=com" ...
1
vote
1answer
582 views

Internet browsing problems when the Mac is bound to a Microsoft server with Active Directory

I have set up Active Directory on my Mac and I can log in and authenticate fine to the server. When I try to browse the Internet, there is an error which says "The user could not be determined by the ...
0
votes
1answer
489 views

Detaching from Active Directory and keeping mobile accounts

I have a MacBook Pro which is attached to an AD domain. The user has a domain account which is Administrator, Managed and Mobile - the home directory is on the local machine. The company is closing ...