Questions tagged [active-directory]

Microsoft's proprietary directory services system.

Filter by
Sorted by
Tagged with
9
votes
9answers
37k views

Safari 7 can't connect to intranet using HTTP authentication

See the UPDATE below for new information about the actual HTTP requests going on under the hood. So I started a new job back in October. It's mostly a Windows shop, and they use IIS and Active ...
5
votes
4answers
15k views

opendirectoryd taking up 1/4 of the cpu and driving fans crazy on MacBook Air

Since a couple of days my 2011 13" MBA (i5, 1,7Ghz) has a very strange issue which I don't know how to get rid of. Every now and then (sometimes more times a day) a process called opendirectoryd ...
5
votes
2answers
7k views

Opedirectoryd taking >90% of CPU + thousands of messages in console per second

Some time ago our company laptops started to overheat. At first it was nothing serious but after a while almost all our macbooks started to act more like ovens than computers. The issue seems to lie ...
4
votes
1answer
9k views

How to unbind from active directory while preserving a user account?

My account is associated with an active directory of a previous company i was working at. What is the best way to unbind my account from the AD without losing my files? I have admin access to the ...
4
votes
1answer
90 views

Online Open Directory services? Can we install profiles before setting up Macs?

So we're setting up a subsidiary company in another country, and we will be needing a bunch of Mac Minis that some part-time (hourly) employees will use. The employees will be rotating between the ...
4
votes
1answer
751 views

Active Directory login takes from seconds to minutes on OSX

Login screen loads a very long time occasionally. It's annoying to wait for 5 minutes just to be able to use the MacBook. I have not been able to find a reason why it sometimes takes a very long time ...
4
votes
1answer
8k views

Authentication Server could not be contacted

Our OS X Server machine has had no issue at all with being in the Windows AD domain right up until we updated it to OS X 10.10. Now it behaves bizarrely, refuses to connect to our Exchange mail server,...
4
votes
2answers
1k views

Integrating Active Directory into our Mac Mavericks Open Directory Domain

Help... :) We are adding an Active Directory server to our network, to assist with larger groups and email issues. Problem is, through searching I've found people who say it is easy and others who ...
4
votes
1answer
11k views

Unable to create Mobile Account on AD Connected Mavericks Machine

Whenever I try to login as an AD user to an OS X Mavericks Macbook Pro it says unable to create mobile account. I do have the AD settings set to create a mobile account on login so that is correct but ...
3
votes
3answers
23k views

How do I join a Microsoft Active Directory Domain in OS X?

I'm having some problems trying to join our university's Active Directory. Some of the errors I'm receiving are: The plugin encountered an error processing request. Authentication server ...
3
votes
2answers
3k views

How do I unbind a Mac from the AD using the command line?

Currently I am using the below command line to bind any Mac to my AD, and so far has been work perfectly. dsconfigad -a hostname -u DomainAdminsUserName -p Password --ou "CN=Computers,DC=hello,DC=com"...
3
votes
2answers
67 views

map network drives

I need to get a script that would map network drives based on a person's user name (we use AD to allow access). It used to work prior to 10.10. We have a new Mac lab that is running 10.12.6. The old ...
3
votes
2answers
7k views

Active directory on MacOS

I am currently using microsoft AD on my windows machine to manage users and groups and access privileges,etc. But now I received a macbook and I wonder how or if there is a way to do AD operations on ...
3
votes
3answers
31k views

How to join an Active Directory domain in Lion?

where do I begin in joining an OS X Lion workstation to an existing AD Domain (Server 2008 R2)?
3
votes
1answer
304 views

How long are Windows Server 2003 Active Directory credentials cached on Snow Leopard?

I have a few Macbooks that will be added to our Windows 2003 domain controller. Since these are mobile units, concerns arose of how long they (the machines) will maintain login rights after their last ...
3
votes
1answer
27 views

Upon trying to login to an Active Directory, I am alerted with a window saying the account has expired. How can I enable it?

Upon trying to login to an all domains in Directory Utility, I am alerted with a window saying the account has expired. How can I re-enable it or fix this problem another way? I am able to unlock it ...
3
votes
2answers
2k views

macOS Sierra SSH Active Directory login not working

I have a really strange problem with my macOS Sierra Server. It is connected to the Active Directory server and limited access to the login window only for few people. This is working without any ...
3
votes
1answer
19k views

El Capitan with Network Authentication Change Password not working

OS 10.11.4 : When trying to change password of my user i am getting the following error The password for the account was not changed The server is not available. Change your password when server ...
3
votes
2answers
3k views

AD User as an administrator on the Mac?

I'm looking for a way to add an Active Directory user to a Mac and let them administrate the machine, without making more than just that user an administrator. Right now, I'm using Directory Utility ...
3
votes
1answer
866 views

Anyone gotten 10.7.2 to bind properly to Active Directory in a multi-domain environment?

I work for an international non-profit that has Active Directory with multiple domains. (A bunch of them.) We can't get Lion (10.7.2) to bind to it properly. Has anyone been successful in getting AD ...
3
votes
0answers
122 views

Active Directory user cannot log in

In my company AD we have a user cannot log in the Mac. The mac has bounded to AD, and the other users can log in without issues. It happens after I removed her mobile home directory on Mac. I thought ...
3
votes
1answer
384 views

Losing administrative rights

I have a handful of Mac's running Mavericks and up. Each Mac is generally used by 1-3 people. Each person is a member of a specific AD group. Pre-deployment we added that AD group to the "Allow ...
3
votes
0answers
754 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
3
votes
2answers
2k views

Airport Extreme Name Resolution

I have a little issue with my airport extreme. I'm using the device in my corporate network which has two DNS server for resolving intern and external names. When I do an nslookup "public adresse" (...
2
votes
2answers
2k views

Detaching from Active Directory and keeping mobile accounts

I have a MacBook Pro which is attached to an AD domain. The user has a domain account which is Administrator, Managed and Mobile - the home directory is on the local machine. The company is closing ...
2
votes
4answers
20k views

What is the format for logging into a domain account in OS X?

At the login screen, how do I login to a domain account? For example, on Windows the username might be something like louis@contoso.local, where the domain is contoso.local. Edit: The AD username ...
2
votes
1answer
863 views

How to get my networked drives to also work on Mountain Lion?

I have a networked drive on the XP side of my MacBook. I use a VPN and then can login to the drive. Nothing too special going on. I believe the server uses Active Directory. There isn't a ton of info ...
2
votes
1answer
3k views

Active Directory account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...
2
votes
2answers
24k views

Enabling Wireless Before Logon for Active Directory

We are purchasing computers in the next week on our Enterprise network and will have a mix of Macs and PCs. We are currently running our AD server on Windows Server 2008R2. We use folder redirection ...
2
votes
1answer
124 views

How do I remove domains from the network browser?

When I go to the network browser (in the Finder, hit command K, then click the "Browse" button, or just shift-command K), I see three domain names from a network I used to connect to six years ago. ...
2
votes
0answers
27 views

If possible how do I single out a app from starting in Safe Mode

If possible how do I single out a app from starting in Safe Mode. I want to use Safe Mode with out Photos involved for example. Is that possible?
2
votes
0answers
404 views

SCEP Request on Mac

I am looking for a way to issue a SCEP request to my organizations CAIssuing server. I manage a number of Macs and we currently import the certificates by hand using a profile on a web server. I know ...
2
votes
0answers
3k views

Unable to deploy home folder mobility settings through an Apple MDM server

I have setup the latest Apple MDM server (Mavericks 10.9.2/Server 3.0.3) with Profile Manager and I'm able to push out configuration profiles to test Macs. One of my goals is to push out profiles ...
2
votes
0answers
511 views

Mount Windows share automatically with Active Directory credentials

In our environment we have a bunch of iMacs running Mountain Lion that are bound to Active Directory for authentication, and we also have a Windows share that we would like all Active Directory ...
1
vote
2answers
5k views

Add samba folder to favorite into finder sidebar

I have client stations (OS X Yosemite) bound into Active Directory services. When the user was authorized I prepared his profile from /System/Library/User\ Template/English.lproj/* and settings for ...
1
vote
2answers
7k views

How can I log in to a Mac using an Active Directory account?

I have an iMac running OS X 10.7.4. I successfully managed to get the Mac into my company's Active Directory forest using dsconfigad -add example.com -domain example.com .. I am not, however, able to ...
1
vote
1answer
640 views

Mobile Account as Administrators Not Working While Mobile

I had a user that was set up to administer an OS X machine. That user is an AD account, with mobile accounts enabled. The user's AD group is set to allow administration using the directory utility. I ...
1
vote
1answer
71 views

Making Conflicting UIDs across a LAN of MacOS and Linux hosts Consistent

I have an expanding network and while I have the long term goal of eventually implementing Active Directory hosted on a QNAP NAS. However, in the meantime I have the issue of where my MacOS machines ...
1
vote
1answer
47 views

How to make the last network user username remain in the login field?

I have joined (bound) a MacBook Pro to a Windows Active Directory environment. I've set it to prompt for name and password, rather than show a picture, being the network user is not a local user, and ...
1
vote
1answer
6k views

dsconfigad: Node name wasn't found. (2000)

When I rejoined domain after already joined domain successfully with dsconfigad, it's failed with dsconfigad: Node name wasn't found. (2000)
1
vote
1answer
2k views

Allow only specific AD users/groups to login

I've been doing some testing as my company is planning to integrate our mac users into the windows active directory environment. Joining/removing computers from a windows domain is cake, everything ...
1
vote
1answer
820 views

Where to configure the default user group for file/directory creation?

I would like to configure the default group for any file or directory which is created by my user. I am not sure where to start. Could somebody point me the right direction? My user lives in Active ...
1
vote
2answers
5k views

How to see the members of an Active Directory group in the Mail application

I'd like to find out how to check the members of a group defined in Active Directory from the Mail application in OSX 10.8.2 (Mountain Lion). I have my corporate AD server defined as an LDAP server, ...
1
vote
1answer
694 views

Default profile with Active Directory

As a warning: I'm no specialist at all. I work as a student here and trying to help to fix the Mac environment. I might use the wrong terminology at times but I try to be as clear as possible. ...
1
vote
1answer
2k views

Unable to login to MacBook, worked fine with Active Directory account on corp. network

My IT dept setup my new MacBook Pro with 2 accounts. One is a local account and the other is on the Active Directory server. Both have administrative privileges on the mac. I've been using the AD ...
1
vote
1answer
40 views

File Sharing with Active Directory login not working

I've set up macOS Sierra (10.12.6) machine and it binds to AD (Win2012R2). It works with SSH and VNC login without any problem, but not work with File Sharing. Connect to mac server as smb://...
1
vote
1answer
49 views

Add Directory Service to macOS image

I'm trying to add an Active Directory service to macOS image. I know how to bind AD on a Mac but I was looking for an automated way to do it for a large deployment 50–100 Macs, i.e add it in an image ...
1
vote
2answers
1k views

Single AD user cannot login to iMac, but others can

So, I thought this was the same issue I'd seen before with the old Home folder name conflicting, but it is not. The issue is the the iMac "shakes" and refuses her password at login, but I am 100% ...
1
vote
1answer
142 views

I want to change login type of a local user to a network (AD) user

I am using macOS 10.12, Sierra, and I've two local accounts (the one created during unboxing and a backup one). This is a work laptop and I would like to use my Active Directory credentials to login ...
1
vote
1answer
4k views

My Active Directory account keeps locking me out

I have a Mac Pro on Yosemite and I only use Active Directory when accessing server folders and my email. My account locks me out regularly and I can't seem to figure out why. I have disabled all ...