Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [active-directory]

Microsoft's proprietary directory services system.

1
vote
0answers
50 views

MacOS Mojave: How do I change the default /Users directory for ALL users logging in?

I've seen this question answered in various forms for other iterations of Mac OS X, but Mojave is proving a bit more challenging. In short: I have several dual drive systems, (SSD and HDD) with the ...
1
vote
1answer
28 views

User cannot login using AD credentials, others can

Setting up a new MBP (mojave) for a user to replace their iMac. Mac is bound to our Active Directory and test AD account can login and create mobile user without issue. The user that already has a ...
4
votes
1answer
69 views

Online Open Directory services? Can we install profiles before setting up Macs?

So we're setting up a subsidiary company in another country, and we will be needing a bunch of Mac Minis that some part-time (hourly) employees will use. The employees will be rotating between the ...
1
vote
1answer
47 views

Making Conflicting UIDs across a LAN of MacOS and Linux hosts Consistent

I have an expanding network and while I have the long term goal of eventually implementing Active Directory hosted on a QNAP NAS. However, in the meantime I have the issue of where my MacOS machines ...
0
votes
1answer
12 views

Why does Enterprise Connect exit immediately?

Attempts to restart Enterprise Connect do not result in showing its icon or menu.
1
vote
0answers
17 views

Restricted AD users can still log on?

Active Directory user accounts have a property that allows admins to restrict them to specific machines. I.E. the user can only log onto a select list of Windows machines. Why am I mentioning this ...
1
vote
0answers
15 views

Moving an OD “mobile” users to a standalone standard user on macOS

My company has finally moved away from Open Directory using Enterprise Connect and I was wondering if anyone knew how to move a "mobile" account to just standard Users. We have had some success in ...
2
votes
0answers
22 views

If possible how do I single out a app from starting in Safe Mode

If possible how do I single out a app from starting in Safe Mode. I want to use Safe Mode with out Photos involved for example. Is that possible?
0
votes
1answer
200 views

High Sierra file sharing on Macs not working for Active Directory users

Running Macs, High Sierra, in a lab environment. Serving K-12 students. File sharing important as students drop off assignments (files) to instructor computer. However, students logged on to the ...
3
votes
2answers
3k views

Active directory on MacOS

I am currently using microsoft AD on my windows machine to manage users and groups and access privileges,etc. But now I received a macbook and I wonder how or if there is a way to do AD operations on ...
1
vote
1answer
35 views

How to make the last network user username remain in the login field?

I have joined (bound) a MacBook Pro to a Windows Active Directory environment. I've set it to prompt for name and password, rather than show a picture, being the network user is not a local user, and ...
1
vote
1answer
26 views

File Sharing with Active Directory login not working

I've set up macOS Sierra (10.12.6) machine and it binds to AD (Win2012R2). It works with SSH and VNC login without any problem, but not work with File Sharing. Connect to mac server as smb://...
3
votes
1answer
24 views

Upon trying to login to an Active Directory, I am alerted with a window saying the account has expired. How can I enable it?

Upon trying to login to an all domains in Directory Utility, I am alerted with a window saying the account has expired. How can I re-enable it or fix this problem another way? I am able to unlock it ...
3
votes
0answers
98 views

Active Directory user cannot log in

In my company AD we have a user cannot log in the Mac. The mac has bounded to AD, and the other users can log in without issues. It happens after I removed her mobile home directory on Mac. I thought ...
3
votes
2answers
67 views

map network drives

I need to get a script that would map network drives based on a person's user name (we use AD to allow access). It used to work prior to 10.10. We have a new Mac lab that is running 10.12.6. The old ...
1
vote
0answers
25 views

User Login/logout accounting to enforce max session time?

I'd like to set up a home system where users (i.e. house kids) have a given max time of computer use per day/week/whatever, and after that time they're logged off. They should be able to log in and ...
4
votes
1answer
305 views

Losing administrative rights

I have a handful of Mac's running Mavericks and up. Each Mac is generally used by 1-3 people. Each person is a member of a specific AD group. Pre-deployment we added that AD group to the "Allow ...
1
vote
1answer
45 views

Add Directory Service to macOS image

I'm trying to add an Active Directory service to macOS image. I know how to bind AD on a Mac but I was looking for an automated way to do it for a large deployment 50–100 Macs, i.e add it in an image ...
1
vote
0answers
346 views

opendirectoryd thinks it is offline

I have a macOS Sierra (10.12.3) machine hooked up to an AD domain aka "Network Account Server" but I am unable to change my password and I get the error below when I attempt to do so: The server is ...
1
vote
1answer
2k views

How do I unbind a Mac from the AD using the command line?

Currently I am using the below command line to bind any Mac to my AD, and so far has been work perfectly. dsconfigad -a hostname -u DomainAdminsUserName -p Password --ou "CN=Computers,DC=hello,DC=com"...
0
votes
1answer
92 views

MacBook Bound to Active Directory Domain

My MacBook is bound to a Windows Active Directory domain. For the computer to keep contact with the domain controller, the DNS server needs to be set to the IP address of that controller. However, ...
0
votes
1answer
190 views

Mount password protected Samba share with Kerberos ticket

My iMac is connected to the Active Directory server, with no additional GID and UID setup, I can login to the OS X using AD user credentials, but I also need to mount the Desktops and probably other ...
3
votes
2answers
1k views

macOS Sierra SSH Active Directory login not working

I have a really strange problem with my macOS Sierra Server. It is connected to the Active Directory server and limited access to the login window only for few people. This is working without any ...
1
vote
2answers
977 views

Single AD user cannot login to iMac, but others can

So, I thought this was the same issue I'd seen before with the old Home folder name conflicting, but it is not. The issue is the the iMac "shakes" and refuses her password at login, but I am 100% ...
1
vote
1answer
136 views

I want to change login type of a local user to a network (AD) user

I am using macOS 10.12, Sierra, and I've two local accounts (the one created during unboxing and a backup one). This is a work laptop and I would like to use my Active Directory credentials to login ...
1
vote
0answers
1k views

Can't log in after AD Username Change

We currently are updating all our Active Directory usernames from the old format (FirstnameLastinitial) to a new format (FirstnameLastname). So far, the Windows side of these changes have been working ...
1
vote
0answers
121 views

El Capitan, AD2008, NFS strange behavior

I'm in the process of upgrading a test box to El Capitan and have run into some strange behavior with what may be network NFS share permissions? Background info: We currently authenticate to a 2008 ...
2
votes
0answers
367 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
3
votes
1answer
18k views

El Capitan with Network Authentication Change Password not working

OS 10.11.4 : When trying to change password of my user i am getting the following error The password for the account was not changed The server is not available. Change your password when server ...
-1
votes
1answer
469 views

Migrating Active Directory accounts from one Mac to another using Migration Assistant

Is it possible to migrate Active Directory network accounts from one Mac to another with Migration assistant? They don't show up in Migration Assistant; only the local accounts do.
0
votes
1answer
700 views

OS X Server & Time Machine for Active Directory Users

In my setup, we have an OS X server, where the machine is bound to our Active Directory domain. I am able to log onto the machine using AD users/credentials locally, with no problems. However, when ...
1
vote
1answer
5k views

dsconfigad: Node name wasn't found. (2000)

When I rejoined domain after already joined domain successfully with dsconfigad, it's failed with dsconfigad: Node name wasn't found. (2000)
0
votes
1answer
658 views

Network homes / synchronized mobile homes with OS X and Active Directory

I work in a company which manages IT for several customers (mainly for Apple OS X deployments). Some of them have more users than computers, so they need some form of "movable" home directory (so the ...
5
votes
2answers
6k views

Opedirectoryd taking >90% of CPU + thousands of messages in console per second

Some time ago our company laptops started to overheat. At first it was nothing serious but after a while almost all our macbooks started to act more like ovens than computers. The issue seems to lie ...
0
votes
1answer
462 views

Does OS X respect Windows Server 2012 AD DS Fine-Grained Password policies?

Trying to setup fine-grained password policies, but Mobile Accounts on OS X seem to be hitting the default domain policy versus the fine-grained policy applied to the users. Does the OS X AD plug-in ...
0
votes
1answer
55 views

AD users are unable to log into web server on Yosemite server

Active Directory Domain accounts unable to access the web server hosted on the Yosemite server. Local users can authenticate. I cannot find a setting to enable the Web services. I feel there is a ...
1
vote
2answers
3k views

How to get current user SID in Mac OS X

For my application purpose, I want to get the user information from Active Directory. Especially I want to get current user SID and user account domain SID. Can anyone tell me some way to get this ...
0
votes
1answer
693 views

OS X Server bound to Active Directory, but OS X Clients who are logged in as AD users prompted for username when connecting to OS X server file shares

OS X Server bound to Active Directory, but OS X Clients who are logged in as AD users prompted for username when connecting to OS X server file shares The OS X server appears to be bound to AD with ...
1
vote
2answers
4k views

Add samba folder to favorite into finder sidebar

I have client stations (OS X Yosemite) bound into Active Directory services. When the user was authorized I prepared his profile from /System/Library/User\ Template/English.lproj/* and settings for ...
0
votes
1answer
2k views

Change Active Directory Password Expiration Prompt in OS X Yosemite

I'm looking for a way to change the default Active Directory password expiration prompt at login from 30 days to our current IT policy of 14 days. Every time a user logs in on a Mac with Active ...
1
vote
1answer
4k views

My Active Directory account keeps locking me out

I have a Mac Pro on Yosemite and I only use Active Directory when accessing server folders and my email. My account locks me out regularly and I can't seem to figure out why. I have disabled all ...
0
votes
1answer
236 views

Centrify Advantages

Before I spend a lot of money. What are the main benefits of using Centrify over the Mac's built in ability to bind to Active Directory? After many years of using the "magic triangle" and defining ...
1
vote
1answer
2k views

Allow only specific AD users/groups to login

I've been doing some testing as my company is planning to integrate our mac users into the windows active directory environment. Joining/removing computers from a windows domain is cake, everything ...
0
votes
3answers
1k views

Mac bind to windows domain with wrong name

I'm fairly new to the world of Mac. I've had the administering of around 100 macs thrust upon me (previous guy left, little documentation. Only things like the images he used, no documentation of ...
4
votes
1answer
6k views

Authentication Server could not be contacted

Our OS X Server machine has had no issue at all with being in the Windows AD domain right up until we updated it to OS X 10.10. Now it behaves bizarrely, refuses to connect to our Exchange mail server,...
0
votes
2answers
287 views

Active Directory login

I am new to Mac's. I have a new MacBook Air OS X 10.9.5. I was given and told to get it on our active directory domain. I was able to figure out how to bind it to AD. I have allow network users to ...
0
votes
1answer
2k views

Active Directory Home Folder on Startup

We've recently integrated all of our Macs to our Active Directory environment, and some of our users have MacBooks. When "binding" their laptops to the domain, I enabled "Create mobile account at ...
0
votes
1answer
1k views

Bind Secondary Groups to Active Directory w/ Unix Extensions

I'm running Windows Server 2012 R2 w/ Active Directory and Unix Extensions. I have several linux/bsd hosts already connected to the domain via ldap and mapping the uid/gid/secondary groups properly. ...
0
votes
1answer
919 views

Change account profile photo on network account

We have recently joined three iMacs to our Active Directory domain. I would like to set the account profile photo, however this seems to be disabled for network accounts (I can set it for local ...
4
votes
2answers
1k views

Integrating Active Directory into our Mac Mavericks Open Directory Domain

Help... :) We are adding an Active Directory server to our network, to assist with larger groups and email issues. Problem is, through searching I've found people who say it is easy and others who ...