After my mac is upgraded to Mac OS 13.3.1, it cannot bind to Active Directory. mac said its time is different from my DC. But i ensured that their time is the same. They get from the same ntp server. And other iMac with OS 13.1 can join the same Active Directory successfully. I ensure my Active Directory is well working. Does anyone have a solution to this?
iMac 21.5″, OS X 10.11
On a PC, open Active Directory Users & Computers. Click the Action menu and Find. Change the Find field from Users, Contacts and Groups to Computers and type in the hostname on the name field. When you find the hostname you can right-click and delete it.
On a PC, open Active Directory Users & Computers. Click the Action menu and Find. Change the Find field from Users, Contacts and Groups to Computers and type in the hostname on the name field. When you find the hostname you can right-click and delete it.
Make sure you do not have a computer object in your Active Directory for this Mac. Remove any hostnames that match in AD. Then retry binding to AD. It works in my corporate environment on Ventura 13.3.1.
There is a command line utility called dsconfigad. You can issue "dsconfigad -show" if it returns results then you are successfully bound.
Most have moved away from direct AD binding and are using Apple's SSO Kerberos extension or NoMAD instead.
Thank you for your reply. I have tried to remove a computer object in Active Directory for this Mac. But the issue is still here. How to find any hostnames that match in AD ?
Mac OS 13.3.1 cannot join Active Directory
