Delete a domain admin user on imac

Question

Level 1

0 points

Delete a domain admin user on imac

One of my imacs has a problem with my login. I believe my account on that machine is corrupt, but since I login as a domain admin (active directory), there is no account on the local machine with my name. However, there are files under users/jeff.

Is there any way to delete the files related just to my login? I can login as administrator without any problems. When I log in as myself, my permissions are wrong. That's why I'd like to clear out any settings related to my account and start over.

imac, Mac OS X (10.5.8)

Posted on Mar 5, 2010 5:57 AM

Reply

Answer 1

desono Author

Level 1

0 points

Mar 10, 2010 6:35 AM in response to desono

Any thoughts on the above question?

Reply

Answer 2

Mar 11, 2010 7:23 AM in response to desono

Hi

+"However, there are files under users/jeff"+

Perhaps I'm misunderstanding but this implies there is a home folder stored locally? If you are absolutely certain your network based profile is the most current one then why don't you simply login as the local administrator and delete the jeff profile from /Users? Don't forget to delete it from the Accounts Preferences Pane as well. You may also want to unbind and rebind using the Active Directory Plugin in Directory Utility.

I'm going to assume your account has been configured as a Mobile one? If that's the case you should be prompted to create your profile locally the next time you login.

However this may not 'cure' your problem? It's more than possible there are 'issues' with your network based profile. If you login with the local admin account does everything work as it should?

HTH?

Tony

Reply

Answer 3

desono Author

Level 1

0 points

Mar 12, 2010 12:22 PM in response to Antonio Rocco

Thanks Antonio. I'll give your ideas a try. The computer is tied up for the next week so I can't get at it, but will let you know what I find out.

I think the domain account is fine since I can log onto the other 17 machines and have full admin rights as expected. Also, if I log in as the administrator it works fine.

Early on I did try deleting the users/jeff folder, but it didn't seem to help. Perhaps if I do that and then unbind/rebind it will work.

Finally, you mentioned: "Don't forget to delete it from the Accounts Preferences Pane as well". Keep in mind that there is no local account named jeff so there is no way to delete it from the accounts pane.

Reply

Answer 4

Mar 12, 2010 12:58 PM in response to desono

Hi

I did keep it mind but did you read this part of my response?

+"I'm going to assume your account has been configured as a Mobile one?"+

It seems clear this is not the case therefore there won't be a need to delete the account from the Accounts Preferences Pane. You may want to configure the AD Plug-in to not force home folder creation on the local drive. Again I'm assuming you want to work across the network and you don't want to cache your profile locally?

Tony

Reply

Answer 5

desono Author

Level 1

0 points

Mar 17, 2010 10:08 AM in response to Antonio Rocco

Hi Tony- Not that it will help this current situation, but your idea of NOT creating a local home folder may be a good one. What we have done with students it to automatically create a folder on an attached "work" drive so they can store their huge files locally (for video and audio creation). However, for Word docs we've instructed them on how to save them to their mapped network drive, instead of saving to their local user folder. However, many do not remember to save to the network and instead save to the local user folder. That means that data will be lost and tears will fall (normal state here). At least getting rid of the local user folder might remind them to save to the network...

Reply

Answer 6

desono Author

Level 1

0 points

Mar 25, 2010 12:54 PM in response to desono

I just got time to test the suggestion you had on removing my broken account on one of our imacs, but your idea did not work. I logged in as admin, deleted the user folder named jeff, took the computer off the active directory domain, added it back in and logged in as jeff. The permissions were still standard instead of being elevated to domain admin level... 😟

Reply