Skip to main content

Questions tagged [active-directory]

Microsoft's proprietary directory services system.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

Assistance Needed with AD Account Login Issue on File Vault-Enabled Mac

I hope this message finds you well. I recently set up a Mac computer for a user in my office, as per their request. This is the only Mac on our network. I managed to bind it to our Active Directory ...
Prateek Singhal's user avatar
0 votes
1 answer
32 views

Mounting a shared network folder using an active directory domain security group

Background: I am trying to deploy a custom backup strategy in my lab. A "trigger" script is executed periodically on the computer, fetches the most recent backup instructions for the machine ...
Gaetan's user avatar
  • 11
1 vote
0 answers
27 views

Force file owner on mac share to match windows AD of user writing file?

We have several Ventura Macs bound to our Active Directory servers. The Macs have SMB shares on them that are accessible to Windows machines on the network. The Mac users log in using the same AD ...
Sam Marrocco's user avatar
0 votes
0 answers
69 views

Login to local admin from mobile user

I'm on MacOS 13.5 on a Macbook. On the first login screen after turning my computer on (which I think it's for FileVault), a local admin user shows up (which I have the password to). I can login here, ...
laurentius's user avatar
1 vote
1 answer
321 views

samba.org install on Monterey serving files with Active Directory binding

My basic requirement is to use a macOS Monterey machine as a server (without running macOS Server, which is deprecated) to host SMB shares while using Active Directory as my network accounts source (...
64questions's user avatar
0 votes
0 answers
2k views

Kerberos and macOS: kinit unable to reach any KDC in realm AD.DOMAIN.COM, tried 10 KDCs

In our organization, we have 25 Active Directory Domain Controllers. For our big sites, we have 2 DC per site. We have about 50 MacBooks, with the rest being Windows laptops that doesn't have the same ...
Xavier's user avatar
  • 1
0 votes
0 answers
417 views

Looking for locally stored Active Directory computer SID. Does it exist?

In order to collate information from our Active Directory and our endpoint management systems, I'm trying to gather AD information via EPM. However, macOS doesn't seem to have much about the AD ...
John Straffin's user avatar
4 votes
1 answer
5k views

Terminal equivalent command for Directory Utility View specific user OD data

I wonder if there's any equivalent terminal command that can output the same data displayed when the I search for the domain user Under Users in the OD node (/Active Directory/MYCOMP/...) the data is ...
Zohar81's user avatar
  • 579
0 votes
0 answers
1k views

AD Account not working

For a few days now I cannot login to AD Accounts anymore. I receive the message "Your are unable to log in to the user account "XYZ" at this time. Logging into the account failed ...
CAS CAS's user avatar
  • 11
4 votes
1 answer
20k views

authentication is disabled - How to verify whether this is local disabling or Active Directory disabling

I have a Macbook Pro that uses ActiveDirectory for authentication. However, when I go to System Preferences to make changes, it gives me the following error: If I run dscl . -read /Users/<username&...
ibpix's user avatar
  • 41
1 vote
0 answers
144 views

Update local password to match domain password?

Scenario: company-provided MacBook Pro, Big Sur 11.2.3, and I used it in office for a few months on the wired LAN and Wireless networks. COVID therefore WFH, but now my login password while home does ...
Robert Kerr's user avatar
0 votes
0 answers
95 views

Cannot change admin account password on company-provided laptop

I have a macbook pro running macOS Big Sur 11.1 that was given to me by my former employer. They allowed me to keep the laptop after I left the company. When I try changing my password, I get this ...
Zane Bradley's user avatar
3 votes
1 answer
1k views

Apple Business Manager Error not covered on support page - Account Update Not Allowed

We have begun the processing of syncing Apple Business Manager with our Microsoft Intune instance (all Azure Active Directory accounts) via SCIM. In the logs, for 2 of our accounts, I am given the ...
Stpete111's user avatar
  • 193
1 vote
0 answers
572 views

BigSur Active directory connectivity issues (offline after successful bind.)

I've installed BigSur on physical machine and bind it to remote LDAP server which reside behind vpn server. The bind itself went just fine, but when I try to login or fetch any of the AD users, it ...
Zohar81's user avatar
  • 579
0 votes
0 answers
409 views

Listing all the users part of an AD group

I want to know the users part of an existing Active Directory Group. Trying to use the id utility : https://ss64.com/osx/id.html Seems like i can get the list of groups that a user is part of with the ...
skandpurohit's user avatar
0 votes
0 answers
117 views

The easiest way to restart active directory connection (preferable from command line)

I'm currently testing my software compatibility in macOS Big Sur, and it requires connection to domain controller… Unfortunately, in this new environment (beta version) the connection goes down after ...
Zohar81's user avatar
  • 579
1 vote
1 answer
5k views

How can I verify if a group exists in Active Directory on a certain domain

In Windows you can use the "net" command to do this quite easily: net group /domain groupName Which checks if groupName exists in your current domain. Is there something equivalent in Mac?
brianrobt's user avatar
  • 121
1 vote
0 answers
487 views

User can't save any changes on an SMB share

We run a mixed environment of Mac/Windows. Our Macs are on High Sierra and using Windows Server 16. This is issue is only happening to this domain user. Our permissions are very flat, everyone has ...
havoc319's user avatar
1 vote
1 answer
515 views

macOS catalina ignores shell in AD and uses zsh instead

We have Catalina hosts connected to our AD domain. Directory Utility shows AD users having /bin/bash as their shell (in Directory Editor), and the default shell for the domain is /bin/bash (in ...
David Thompson's user avatar
1 vote
0 answers
170 views

Share a USB printer over Active Directory domain network

I would like to share a printer connected with the USB cable to my iMac with all the other Windows PCs that are part of a Windows Server 2016 Active Directory domain network. Of course to do so, my ...
nicovon's user avatar
  • 81
1 vote
0 answers
68 views

How to Fix Login Issues for a Remote "Managed, Mobile" User

Managed, Mobile account will not successfully login without first logging into a local admin account and then switching users to the Managed, Mobile account. Is there anything that I could check or ...
confoundr's user avatar
  • 111
0 votes
0 answers
118 views

Trouble with updating mobile and local user account passwords

I've started a new position where I manage a number of macbooks running High Sierra and Mojave with Filevault enabled. We've got mobile/network accounts on them that are connected to Active Directory. ...
GeoGeoGeometry's user avatar
7 votes
2 answers
15k views

How do I change the password on an AD-bound Mac to match what's already in AD?

My Mac at work is bound to our Active Directory domain. It's managed with JAMF, and I have NoMAD installed. The last time I came due for a password change (every sixty days), an unknown issue ...
JakeRobb's user avatar
  • 625
0 votes
1 answer
7k views

dsconfigad returns error "authentication server could not be contacted. (5200)", but GUI domain join works without a problem

So I've built a "script", to deploy using JAMF. It is pretty much a single command. It looks like this: dsconfigad -add "SERVERNAME" -force -computer "COMPUTERNAME" -domain "SELECTED_OU" -username "...
kjubus's user avatar
  • 153
1 vote
0 answers
18 views

Unwanted activation of Parental Controls on network accounts

I am very confused about this issue and I don't know what to look for. We are using MS Active Directory Accounts on our MacBooks. Since last week the parental controls were activated on all network ...
nudZ's user avatar
  • 11
2 votes
0 answers
937 views

MacOS Mojave: How do I change the default /Users directory for ALL users logging in?

I've seen this question answered in various forms for other iterations of Mac OS X, but Mojave is proving a bit more challenging. In short: I have several dual drive systems, (SSD and HDD) with the ...
RamonetB's user avatar
1 vote
1 answer
2k views

User cannot login using AD credentials, others can

Setting up a new MBP (mojave) for a user to replace their iMac. Mac is bound to our Active Directory and test AD account can login and create mobile user without issue. The user that already has a ...
Arpan3t's user avatar
  • 11
4 votes
1 answer
133 views

Online Open Directory services? Can we install profiles before setting up Macs?

So we're setting up a subsidiary company in another country, and we will be needing a bunch of Mac Minis that some part-time (hourly) employees will use. The employees will be rotating between the ...
Christian A. Strømmen's user avatar
1 vote
1 answer
539 views

Making Conflicting UIDs across a LAN of MacOS and Linux hosts Consistent

I have an expanding network and while I have the long term goal of eventually implementing Active Directory hosted on a QNAP NAS. However, in the meantime I have the issue of where my MacOS machines ...
Darf Nader's user avatar
0 votes
1 answer
90 views

Why does Enterprise Connect exit immediately?

Attempts to restart Enterprise Connect do not result in showing its icon or menu.
eel ghEEz's user avatar
  • 113
2 votes
0 answers
35 views

If possible how do I single out a app from starting in Safe Mode

If possible how do I single out a app from starting in Safe Mode. I want to use Safe Mode with out Photos involved for example. Is that possible?
Lisa Ann's user avatar
  • 525
0 votes
1 answer
572 views

High Sierra file sharing on Macs not working for Active Directory users

Running Macs, High Sierra, in a lab environment. Serving K-12 students. File sharing important as students drop off assignments (files) to instructor computer. However, students logged on to the ...
Carrie Nichols's user avatar
6 votes
2 answers
18k views

Active directory on MacOS

I am currently using microsoft AD on my windows machine to manage users and groups and access privileges,etc. But now I received a macbook and I wonder how or if there is a way to do AD operations on ...
Tak's user avatar
  • 343
1 vote
1 answer
483 views

How to make the last network user username remain in the login field?

I have joined (bound) a MacBook Pro to a Windows Active Directory environment. I've set it to prompt for name and password, rather than show a picture, being the network user is not a local user, and ...
DavidMWilliams's user avatar
1 vote
1 answer
199 views

File Sharing with Active Directory login not working

I've set up macOS Sierra (10.12.6) machine and it binds to AD (Win2012R2). It works with SSH and VNC login without any problem, but not work with File Sharing. Connect to mac server as smb://...
hyamane's user avatar
  • 21
3 votes
1 answer
48 views

Upon trying to login to an Active Directory, I am alerted with a window saying the account has expired. How can I enable it?

Upon trying to login to an all domains in Directory Utility, I am alerted with a window saying the account has expired. How can I re-enable it or fix this problem another way? I am able to unlock it ...
Jason Gagson's user avatar
3 votes
0 answers
302 views

Active Directory user cannot log in

In my company AD we have a user cannot log in the Mac. The mac has bounded to AD, and the other users can log in without issues. It happens after I removed her mobile home directory on Mac. I thought ...
dsakura's user avatar
  • 31
3 votes
2 answers
124 views

map network drives

I need to get a script that would map network drives based on a person's user name (we use AD to allow access). It used to work prior to 10.10. We have a new Mac lab that is running 10.12.6. The old ...
Steve Lunney's user avatar
3 votes
1 answer
829 views

Losing administrative rights

I have a handful of Mac's running Mavericks and up. Each Mac is generally used by 1-3 people. Each person is a member of a specific AD group. Pre-deployment we added that AD group to the "Allow ...
Residualfail's user avatar
1 vote
1 answer
74 views

Add Directory Service to macOS image

I'm trying to add an Active Directory service to macOS image. I know how to bind AD on a Mac but I was looking for an automated way to do it for a large deployment 50–100 Macs, i.e add it in an image ...
Ekom's user avatar
  • 111
3 votes
2 answers
10k views

How do I unbind a Mac from the AD using the command line?

Currently I am using the below command line to bind any Mac to my AD, and so far has been work perfectly. dsconfigad -a hostname -u DomainAdminsUserName -p Password --ou "CN=Computers,DC=hello,DC=com"...
Fabio's user avatar
  • 1,168
0 votes
1 answer
177 views

MacBook Bound to Active Directory Domain

My MacBook is bound to a Windows Active Directory domain. For the computer to keep contact with the domain controller, the DNS server needs to be set to the IP address of that controller. However, ...
Andrew's user avatar
  • 123
0 votes
1 answer
1k views

Mount password protected Samba share with Kerberos ticket

My iMac is connected to the Active Directory server, with no additional GID and UID setup, I can login to the OS X using AD user credentials, but I also need to mount the Desktops and probably other ...
Edik Mkoyan's user avatar
3 votes
2 answers
3k views

macOS Sierra SSH Active Directory login not working

I have a really strange problem with my macOS Sierra Server. It is connected to the Active Directory server and limited access to the login window only for few people. This is working without any ...
Bene's user avatar
  • 83
1 vote
2 answers
3k views

Single AD user cannot login to iMac, but others can

So, I thought this was the same issue I'd seen before with the old Home folder name conflicting, but it is not. The issue is the the iMac "shakes" and refuses her password at login, but I am 100% ...
SamAndrew81's user avatar
1 vote
1 answer
397 views

I want to change login type of a local user to a network (AD) user

I am using macOS 10.12, Sierra, and I've two local accounts (the one created during unboxing and a backup one). This is a work laptop and I would like to use my Active Directory credentials to login ...
Simone Avogadro's user avatar
1 vote
0 answers
2k views

Can't log in after AD Username Change

We currently are updating all our Active Directory usernames from the old format (FirstnameLastinitial) to a new format (FirstnameLastname). So far, the Windows side of these changes have been working ...
Zackary's user avatar
  • 11
1 vote
0 answers
144 views

El Capitan, AD2008, NFS strange behavior

I'm in the process of upgrading a test box to El Capitan and have run into some strange behavior with what may be network NFS share permissions? Background info: We currently authenticate to a 2008 ...
user41724's user avatar
2 votes
0 answers
513 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
Edward S.'s user avatar
  • 455
4 votes
1 answer
19k views

El Capitan with Network Authentication Change Password not working

OS 10.11.4 : When trying to change password of my user i am getting the following error The password for the account was not changed The server is not available. Change your password when server ...
SeanClt's user avatar
  • 1,404