Setting up a new MBP (mojave) for a user to replace their iMac. Mac is bound to our Active Directory and test AD account can login and create mobile user without issue. The user that already has a Mac (managed, mobile account) cannot login using AD credentials. The user has never logged into the new MBP, and can still login to iMac with AD credentials. Things I have tried:
- Unbind/Re-Bind to AD
- Checked domain controller, no login attempt registered unless using incorrect password. The MBP computer object does authenticate with the DC and other user logins do too.
id <ad username>resolves properly showing the user.
- Checked system.log, but nothing stands out. Searching username returns nothing.