Questions tagged [active-directory]

Microsoft's proprietary directory services system.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

Trouble with updating mobile and local user account passwords

I've started a new position where I manage a number of macbooks running High Sierra and Mojave with Filevault enabled. We've got mobile/network accounts on them that are connected to Active Directory. ...
0
votes
0answers
22 views

How do I change the password on an AD-bound Mac to match what's already in AD?

My Mac at work is bound to our Active Directory domain. It's managed with JAMF, and I have NoMAD installed. The last time I came due for a password change (every sixty days), an unknown issue ...
0
votes
1answer
42 views

dsconfigad returns error “authentication server could not be contacted. (5200)”, but GUI domain join works without a problem

So I've built a "script", to deploy using JAMF. It is pretty much a single command. It looks like this: dsconfigad -add "SERVERNAME" -force -computer "COMPUTERNAME" -domain "SELECTED_OU" -username "...
1
vote
0answers
11 views

Unwanted activation of Parental Controls on network accounts

I am very confused about this issue and I don't know what to look for. We are using MS Active Directory Accounts on our MacBooks. Since last week the parental controls were activated on all network ...
1
vote
0answers
442 views

MacOS Mojave: How do I change the default /Users directory for ALL users logging in?

I've seen this question answered in various forms for other iterations of Mac OS X, but Mojave is proving a bit more challenging. In short: I have several dual drive systems, (SSD and HDD) with the ...
1
vote
1answer
55 views

User cannot login using AD credentials, others can

Setting up a new MBP (mojave) for a user to replace their iMac. Mac is bound to our Active Directory and test AD account can login and create mobile user without issue. The user that already has a ...
4
votes
1answer
85 views

Online Open Directory services? Can we install profiles before setting up Macs?

So we're setting up a subsidiary company in another country, and we will be needing a bunch of Mac Minis that some part-time (hourly) employees will use. The employees will be rotating between the ...
1
vote
1answer
66 views

Making Conflicting UIDs across a LAN of MacOS and Linux hosts Consistent

I have an expanding network and while I have the long term goal of eventually implementing Active Directory hosted on a QNAP NAS. However, in the meantime I have the issue of where my MacOS machines ...
0
votes
1answer
18 views

Why does Enterprise Connect exit immediately?

Attempts to restart Enterprise Connect do not result in showing its icon or menu.
1
vote
0answers
29 views

Restricted AD users can still log on?

Active Directory user accounts have a property that allows admins to restrict them to specific machines. I.E. the user can only log onto a select list of Windows machines. Why am I mentioning this ...
1
vote
0answers
20 views

Moving an OD “mobile” users to a standalone standard user on macOS

My company has finally moved away from Open Directory using Enterprise Connect and I was wondering if anyone knew how to move a "mobile" account to just standard Users. We have had some success in ...
2
votes
0answers
25 views

If possible how do I single out a app from starting in Safe Mode

If possible how do I single out a app from starting in Safe Mode. I want to use Safe Mode with out Photos involved for example. Is that possible?
0
votes
1answer
304 views

High Sierra file sharing on Macs not working for Active Directory users

Running Macs, High Sierra, in a lab environment. Serving K-12 students. File sharing important as students drop off assignments (files) to instructor computer. However, students logged on to the ...
3
votes
2answers
6k views

Active directory on MacOS

I am currently using microsoft AD on my windows machine to manage users and groups and access privileges,etc. But now I received a macbook and I wonder how or if there is a way to do AD operations on ...
1
vote
1answer
45 views

How to make the last network user username remain in the login field?

I have joined (bound) a MacBook Pro to a Windows Active Directory environment. I've set it to prompt for name and password, rather than show a picture, being the network user is not a local user, and ...
1
vote
1answer
35 views

File Sharing with Active Directory login not working

I've set up macOS Sierra (10.12.6) machine and it binds to AD (Win2012R2). It works with SSH and VNC login without any problem, but not work with File Sharing. Connect to mac server as smb://...
3
votes
1answer
27 views

Upon trying to login to an Active Directory, I am alerted with a window saying the account has expired. How can I enable it?

Upon trying to login to an all domains in Directory Utility, I am alerted with a window saying the account has expired. How can I re-enable it or fix this problem another way? I am able to unlock it ...
3
votes
0answers
121 views

Active Directory user cannot log in

In my company AD we have a user cannot log in the Mac. The mac has bounded to AD, and the other users can log in without issues. It happens after I removed her mobile home directory on Mac. I thought ...
3
votes
2answers
67 views

map network drives

I need to get a script that would map network drives based on a person's user name (we use AD to allow access). It used to work prior to 10.10. We have a new Mac lab that is running 10.12.6. The old ...
3
votes
1answer
370 views

Losing administrative rights

I have a handful of Mac's running Mavericks and up. Each Mac is generally used by 1-3 people. Each person is a member of a specific AD group. Pre-deployment we added that AD group to the "Allow ...
1
vote
1answer
48 views

Add Directory Service to macOS image

I'm trying to add an Active Directory service to macOS image. I know how to bind AD on a Mac but I was looking for an automated way to do it for a large deployment 50–100 Macs, i.e add it in an image ...
3
votes
2answers
3k views

How do I unbind a Mac from the AD using the command line?

Currently I am using the below command line to bind any Mac to my AD, and so far has been work perfectly. dsconfigad -a hostname -u DomainAdminsUserName -p Password --ou "CN=Computers,DC=hello,DC=com"...
0
votes
1answer
95 views

MacBook Bound to Active Directory Domain

My MacBook is bound to a Windows Active Directory domain. For the computer to keep contact with the domain controller, the DNS server needs to be set to the IP address of that controller. However, ...
0
votes
1answer
235 views

Mount password protected Samba share with Kerberos ticket

My iMac is connected to the Active Directory server, with no additional GID and UID setup, I can login to the OS X using AD user credentials, but I also need to mount the Desktops and probably other ...
3
votes
2answers
1k views

macOS Sierra SSH Active Directory login not working

I have a really strange problem with my macOS Sierra Server. It is connected to the Active Directory server and limited access to the login window only for few people. This is working without any ...
1
vote
2answers
1k views

Single AD user cannot login to iMac, but others can

So, I thought this was the same issue I'd seen before with the old Home folder name conflicting, but it is not. The issue is the the iMac "shakes" and refuses her password at login, but I am 100% ...
1
vote
1answer
141 views

I want to change login type of a local user to a network (AD) user

I am using macOS 10.12, Sierra, and I've two local accounts (the one created during unboxing and a backup one). This is a work laptop and I would like to use my Active Directory credentials to login ...
1
vote
0answers
1k views

Can't log in after AD Username Change

We currently are updating all our Active Directory usernames from the old format (FirstnameLastinitial) to a new format (FirstnameLastname). So far, the Windows side of these changes have been working ...
1
vote
0answers
127 views

El Capitan, AD2008, NFS strange behavior

I'm in the process of upgrading a test box to El Capitan and have run into some strange behavior with what may be network NFS share permissions? Background info: We currently authenticate to a 2008 ...
2
votes
0answers
393 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
3
votes
1answer
19k views

El Capitan with Network Authentication Change Password not working

OS 10.11.4 : When trying to change password of my user i am getting the following error The password for the account was not changed The server is not available. Change your password when server ...
0
votes
1answer
527 views

Migrating Active Directory accounts from one Mac to another using Migration Assistant

Is it possible to migrate Active Directory network accounts from one Mac to another with Migration assistant? They don't show up in Migration Assistant; only the local accounts do.
0
votes
1answer
720 views

OS X Server & Time Machine for Active Directory Users

In my setup, we have an OS X server, where the machine is bound to our Active Directory domain. I am able to log onto the machine using AD users/credentials locally, with no problems. However, when ...
1
vote
1answer
6k views

dsconfigad: Node name wasn't found. (2000)

When I rejoined domain after already joined domain successfully with dsconfigad, it's failed with dsconfigad: Node name wasn't found. (2000)
0
votes
1answer
664 views

Network homes / synchronized mobile homes with OS X and Active Directory

I work in a company which manages IT for several customers (mainly for Apple OS X deployments). Some of them have more users than computers, so they need some form of "movable" home directory (so the ...
5
votes
2answers
7k views

Opedirectoryd taking >90% of CPU + thousands of messages in console per second

Some time ago our company laptops started to overheat. At first it was nothing serious but after a while almost all our macbooks started to act more like ovens than computers. The issue seems to lie ...
0
votes
1answer
479 views

Does OS X respect Windows Server 2012 AD DS Fine-Grained Password policies?

Trying to setup fine-grained password policies, but Mobile Accounts on OS X seem to be hitting the default domain policy versus the fine-grained policy applied to the users. Does the OS X AD plug-in ...
0
votes
1answer
56 views

AD users are unable to log into web server on Yosemite server

Active Directory Domain accounts unable to access the web server hosted on the Yosemite server. Local users can authenticate. I cannot find a setting to enable the Web services. I feel there is a ...
1
vote
2answers
3k views

How to get current user SID in Mac OS X

For my application purpose, I want to get the user information from Active Directory. Especially I want to get current user SID and user account domain SID. Can anyone tell me some way to get this ...
0
votes
1answer
723 views

OS X Server bound to Active Directory, but OS X Clients who are logged in as AD users prompted for username when connecting to OS X server file shares

OS X Server bound to Active Directory, but OS X Clients who are logged in as AD users prompted for username when connecting to OS X server file shares The OS X server appears to be bound to AD with ...
1
vote
2answers
5k views

Add samba folder to favorite into finder sidebar

I have client stations (OS X Yosemite) bound into Active Directory services. When the user was authorized I prepared his profile from /System/Library/User\ Template/English.lproj/* and settings for ...
0
votes
1answer
3k views

Change Active Directory Password Expiration Prompt in OS X Yosemite

I'm looking for a way to change the default Active Directory password expiration prompt at login from 30 days to our current IT policy of 14 days. Every time a user logs in on a Mac with Active ...
1
vote
1answer
4k views

My Active Directory account keeps locking me out

I have a Mac Pro on Yosemite and I only use Active Directory when accessing server folders and my email. My account locks me out regularly and I can't seem to figure out why. I have disabled all ...
0
votes
1answer
242 views

Centrify Advantages

Before I spend a lot of money. What are the main benefits of using Centrify over the Mac's built in ability to bind to Active Directory? After many years of using the "magic triangle" and defining ...
1
vote
1answer
2k views

Allow only specific AD users/groups to login

I've been doing some testing as my company is planning to integrate our mac users into the windows active directory environment. Joining/removing computers from a windows domain is cake, everything ...
0
votes
3answers
1k views

Mac bind to windows domain with wrong name

I'm fairly new to the world of Mac. I've had the administering of around 100 macs thrust upon me (previous guy left, little documentation. Only things like the images he used, no documentation of ...
4
votes
1answer
7k views

Authentication Server could not be contacted

Our OS X Server machine has had no issue at all with being in the Windows AD domain right up until we updated it to OS X 10.10. Now it behaves bizarrely, refuses to connect to our Exchange mail server,...
0
votes
2answers
288 views

Active Directory login

I am new to Mac's. I have a new MacBook Air OS X 10.9.5. I was given and told to get it on our active directory domain. I was able to figure out how to bind it to AD. I have allow network users to ...
0
votes
1answer
2k views

Active Directory Home Folder on Startup

We've recently integrated all of our Macs to our Active Directory environment, and some of our users have MacBooks. When "binding" their laptops to the domain, I enabled "Create mobile account at ...
0
votes
2answers
1k views

Bind Secondary Groups to Active Directory w/ Unix Extensions

I'm running Windows Server 2012 R2 w/ Active Directory and Unix Extensions. I have several linux/bsd hosts already connected to the domain via ldap and mapping the uid/gid/secondary groups properly. ...