Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

Microsoft's proprietary directory services system.

1
vote
0answers
14 views

Restricted AD users can still log on?

Active Directory user accounts have a property that allows admins to restrict them to specific machines. I.E. the user can only log onto a select list of Windows machines. Why am I mentioning this ...
1
vote
0answers
11 views

Moving an OD “mobile” users to a standalone standard user on macOS

My company has finally moved away from Open Directory using Enterprise Connect and I was wondering if anyone knew how to move a "mobile" account to just standard Users. We have had some success in ...
2
votes
0answers
22 views

If possible how do I single out a app from starting in Safe Mode

If possible how do I single out a app from starting in Safe Mode. I want to use Safe Mode with out Photos involved for example. Is that possible?
0
votes
0answers
13 views

Active Directory offline sync

We are using Active Directory for all Macs now and each user has a "home" drive mounted via AFP. We are finding increasing issues, however, with users being able to access the files in the home drive "...
0
votes
1answer
103 views

High Sierra file sharing on Macs not working for Active Directory users

Running Macs, High Sierra, in a lab environment. Serving K-12 students. File sharing important as students drop off assignments (files) to instructor computer. However, students logged on to the ...
3
votes
2answers
2k views

Active directory on MacOS

I am currently using microsoft AD on my windows machine to manage users and groups and access privileges,etc. But now I received a macbook and I wonder how or if there is a way to do AD operations on ...
1
vote
1answer
30 views

How to make the last network user username remain in the login field?

I have joined (bound) a MacBook Pro to a Windows Active Directory environment. I've set it to prompt for name and password, rather than show a picture, being the network user is not a local user, and ...
1
vote
1answer
24 views

File Sharing with Active Directory login not working

I've set up macOS Sierra (10.12.6) machine and it binds to AD (Win2012R2). It works with SSH and VNC login without any problem, but not work with File Sharing. Connect to mac server as smb://...
3
votes
1answer
23 views

Upon trying to login to an Active Directory, I am alerted with a window saying the account has expired. How can I enable it?

Upon trying to login to an all domains in Directory Utility, I am alerted with a window saying the account has expired. How can I re-enable it or fix this problem another way? I am able to unlock it ...
3
votes
0answers
73 views

Active Directory user cannot log in

In my company AD we have a user cannot log in the Mac. The mac has bounded to AD, and the other users can log in without issues. It happens after I removed her mobile home directory on Mac. I thought ...
3
votes
2answers
66 views

map network drives

I need to get a script that would map network drives based on a person's user name (we use AD to allow access). It used to work prior to 10.10. We have a new Mac lab that is running 10.12.6. The old ...
1
vote
0answers
25 views

User Login/logout accounting to enforce max session time?

I'd like to set up a home system where users (i.e. house kids) have a given max time of computer use per day/week/whatever, and after that time they're logged off. They should be able to log in and ...
0
votes
0answers
16 views

I am looking for a way to push mac software from AD server to connected MAC clients

We have an AD server to which windows and Mac clients are registered. We are able to push msi package to all connected Windows clients through a GPO policy. We are trying to push Mac package to Mac ...
4
votes
1answer
255 views

Loosing administrative rights

I have a handful of Mac's running Mavericks and up. Each Mac is generally used by 1-3 people. Each person is a member of a specific AD group. Pre-deployment we added that AD group to the "Allow ...
1
vote
1answer
44 views

Add Directory Service to macOS image

I'm trying to add an Active Directory service to macOS image. I know how to bind AD on a Mac but I was looking for an automated way to do it for a large deployment 50–100 Macs, i.e add it in an image ...
1
vote
0answers
308 views

opendirectoryd thinks it is offline

I have a macOS Sierra (10.12.3) machine hooked up to an AD domain aka "Network Account Server" but I am unable to change my password and I get the error below when I attempt to do so: The server is ...
1
vote
1answer
2k views

How do I unbind a Mac from the AD using the command line?

Currently I am using the below command line to bind any Mac to my AD, and so far has been work perfectly. dsconfigad -a hostname -u DomainAdminsUserName -p Password --ou "CN=Computers,DC=hello,DC=com"...
0
votes
1answer
88 views

MacBook Bound to Active Directory Domain

My MacBook is bound to a Windows Active Directory domain. For the computer to keep contact with the domain controller, the DNS server needs to be set to the IP address of that controller. However, ...
0
votes
1answer
142 views

Mount password protected Samba share with Kerberos ticket

My iMac is connected to the Active Directory server, with no additional GID and UID setup, I can login to the OS X using AD user credentials, but I also need to mount the Desktops and probably other ...
3
votes
2answers
1k views

macOS Sierra SSH Active Directory login not working

I have a really strange problem with my macOS Sierra Server. It is connected to the Active Directory server and limited access to the login window only for few people. This is working without any ...
1
vote
2answers
821 views

Single AD user cannot login to iMac, but others can

So, I thought this was the same issue I'd seen before with the old Home folder name conflicting, but it is not. The issue is the the iMac "shakes" and refuses her password at login, but I am 100% ...
1
vote
1answer
125 views

I want to change login type of a local user to a network (AD) user

I am using macOS 10.12, Sierra, and I've two local accounts (the one created during unboxing and a backup one). This is a work laptop and I would like to use my Active Directory credentials to login ...
0
votes
0answers
39 views

Remove local admin in favor of network admin?

We have a number of reasons for not wanting local admins on our macs anymore (password rotation and user accountability are the biggest) We still want to maintain admin accounts but have them be ...
1
vote
0answers
1k views

Can't log in after AD Username Change

We currently are updating all our Active Directory usernames from the old format (FirstnameLastinitial) to a new format (FirstnameLastname). So far, the Windows side of these changes have been working ...
1
vote
0answers
118 views

El Capitan, AD2008, NFS strange behavior

I'm in the process of upgrading a test box to El Capitan and have run into some strange behavior with what may be network NFS share permissions? Background info: We currently authenticate to a 2008 ...
2
votes
0answers
334 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
3
votes
1answer
17k views

El Capitan with Network Authentication Change Password not working

OS 10.11.4 : When trying to change password of my user i am getting the following error The password for the account was not changed The server is not available. Change your password when server ...
-1
votes
1answer
407 views

Migrating Active Directory accounts from one Mac to another using Migration Assistant

Is it possible to migrate Active Directory network accounts from one Mac to another with Migration assistant? They don't show up in Migration Assistant; only the local accounts do.
0
votes
1answer
663 views

OS X Server & Time Machine for Active Directory Users

In my setup, we have an OS X server, where the machine is bound to our Active Directory domain. I am able to log onto the machine using AD users/credentials locally, with no problems. However, when ...
1
vote
1answer
5k views

dsconfigad: Node name wasn't found. (2000)

When I rejoined domain after already joined domain successfully with dsconfigad, it's failed with dsconfigad: Node name wasn't found. (2000)
0
votes
1answer
644 views

Network homes / synchronized mobile homes with OS X and Active Directory

I work in a company which manages IT for several customers (mainly for Apple OS X deployments). Some of them have more users than computers, so they need some form of "movable" home directory (so the ...
5
votes
2answers
5k views

Opedirectoryd taking >90% of CPU + thousands of messages in console per second

Some time ago our company laptops started to overheat. At first it was nothing serious but after a while almost all our macbooks started to act more like ovens than computers. The issue seems to lie ...
0
votes
1answer
437 views

Does OS X respect Windows Server 2012 AD DS Fine-Grained Password policies?

Trying to setup fine-grained password policies, but Mobile Accounts on OS X seem to be hitting the default domain policy versus the fine-grained policy applied to the users. Does the OS X AD plug-in ...
0
votes
1answer
55 views

AD users are unable to log into web server on Yosemite server

Active Directory Domain accounts unable to access the web server hosted on the Yosemite server. Local users can authenticate. I cannot find a setting to enable the Web services. I feel there is a ...
1
vote
2answers
3k views

How to get current user SID in Mac OS X

For my application purpose, I want to get the user information from Active Directory. Especially I want to get current user SID and user account domain SID. Can anyone tell me some way to get this ...
0
votes
1answer
661 views

OS X Server bound to Active Directory, but OS X Clients who are logged in as AD users prompted for username when connecting to OS X server file shares

OS X Server bound to Active Directory, but OS X Clients who are logged in as AD users prompted for username when connecting to OS X server file shares The OS X server appears to be bound to AD with ...
1
vote
2answers
4k views

Add samba folder to favorite into finder sidebar

I have client stations (OS X Yosemite) bound into Active Directory services. When the user was authorized I prepared his profile from /System/Library/User\ Template/English.lproj/* and settings for ...
0
votes
0answers
126 views

Best tools and add-ons to integrate OS X to a domain's Active Directory?

Someone here at the office is getting an Apple machine and I need to integrate it into Active Directory. I need to map shared drives, apply group policies such as disabling the firewall, distribute ...
0
votes
1answer
2k views

Change Active Directory Password Expiration Prompt in OS X Yosemite

I'm looking for a way to change the default Active Directory password expiration prompt at login from 30 days to our current IT policy of 14 days. Every time a user logs in on a Mac with Active ...
1
vote
1answer
4k views

My Active Directory account keeps locking me out

I have a Mac Pro on Yosemite and I only use Active Directory when accessing server folders and my email. My account locks me out regularly and I can't seem to figure out why. I have disabled all ...
0
votes
1answer
229 views

Centrify Advantages

Before I spend a lot of money. What are the main benefits of using Centrify over the Mac's built in ability to bind to Active Directory? After many years of using the "magic triangle" and defining ...
1
vote
1answer
2k views

Allow only specific AD users/groups to login

I've been doing some testing as my company is planning to integrate our mac users into the windows active directory environment. Joining/removing computers from a windows domain is cake, everything ...
0
votes
3answers
1k views

Mac bind to windows domain with wrong name

I'm fairly new to the world of Mac. I've had the administering of around 100 macs thrust upon me (previous guy left, little documentation. Only things like the images he used, no documentation of ...
4
votes
1answer
5k views

Authentication Server could not be contacted

Our OS X Server machine has had no issue at all with being in the Windows AD domain right up until we updated it to OS X 10.10. Now it behaves bizarrely, refuses to connect to our Exchange mail server,...
0
votes
2answers
285 views

Active Directory login

I am new to Mac's. I have a new MacBook Air OS X 10.9.5. I was given and told to get it on our active directory domain. I was able to figure out how to bind it to AD. I have allow network users to ...
0
votes
1answer
1k views

Active Directory Home Folder on Startup

We've recently integrated all of our Macs to our Active Directory environment, and some of our users have MacBooks. When "binding" their laptops to the domain, I enabled "Create mobile account at ...
0
votes
1answer
1k views

Bind Secondary Groups to Active Directory w/ Unix Extensions

I'm running Windows Server 2012 R2 w/ Active Directory and Unix Extensions. I have several linux/bsd hosts already connected to the domain via ldap and mapping the uid/gid/secondary groups properly. ...
0
votes
1answer
889 views

Change account profile photo on network account

We have recently joined three iMacs to our Active Directory domain. I would like to set the account profile photo, however this seems to be disabled for network accounts (I can set it for local ...
4
votes
2answers
1k views

Integrating Active Directory into our Mac Mavericks Open Directory Domain

Help... :) We are adding an Active Directory server to our network, to assist with larger groups and email issues. Problem is, through searching I've found people who say it is easy and others who ...
0
votes
6answers
24k views

Solving: Unable to add server. The plugin encountered an error processing request. (10001)

How do I join an Active Directory domain when I get the 10001 error? What is the real cause of the failure? This question is about the famous failure to join an Active Directory from OS X which seems ...