I have an issue with AD binding on Mac. Computer shows its already bind to AD but won't allow domain logins. What I noticed is "Allow network users to log in at login windows" option is grayed out. I have a script which allows me to rejoin AD remotely which is fine but I would like to know if there is a command or script that can go this setting and see if "Allow network...." is available and checked through terminal.

It would be great if someone can help me out or point me in the right direction.

Thanks, Fahed


This usually indicates that the domain record needs cleanup and not that the Mac is broken.

Have you removed the binding, cleared up the machine record (deleting it) and then re-adding the mac?

You could script the removal and binding or script the check in AD, but the language and script for each would be better asked as a follow on question if needed.

|improve this answer|||||

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .