You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: Reiklen
Reiklen Author
User level: Level 1
0 points

Unable to bind to Active Directory

I am trying to bind my organization's first Mac to Active Directory on our SBS 2008 server and would be pulling my hair out right now if I had any left!

When I am attempting to bind I receive the error message:

*Unable to access domain controller*

This computer is unable to access the domain controller for an unknown reason.

This message isn't very helpful so I first verified that connectivity is there by pinging the server. I've also tried binding with invalid credentials and it is communicating on some level as it will come back with invalid username/password.

I have searched for several hours on the issue I am having and haven't found any solutions for my particular problem. In the DirectoryService debug it appears as if the error which causes the process to fail is what is seen below. Those are the last lines and the only error I find in the debug of an attempted bind.



2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Active Directory: Password verify for #####@#####.LOCAL succeeded - cache MEMORY:35fBymn
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Client: Directory Utilit, PID: 296, API: dsDoPlugInCustomCall(), Active Directory Used : DAR : Node Ref = 33555075 : Request Code = 85 : Result code = -14006
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Plug-in call "dsDoPlugInCustomCall()" failed with error = -14006.
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Port: 6643 Call: dsDoPlugInCustomCall() == -14006
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Client: Directory Utilit, PID: 296, API: dsCloseDirNode(), Active Directory Used : DAC : Node Ref = 33555075
2010-10-09 14:44:00 MDT - T[0x0000000100581000] - Client: Directory Utilit, PID: 296, API: dsCloseDirNode(), Active Directory Used : DAR : Node Ref = 33555075 : Result code = 0



Any help you can offer would be greatly appreciated!!!

13" MacBook Pro, Mac OS X (10.6.4)

Posted on Oct 9, 2010 2:22 PM

Reply
Question marked as Top-ranking reply
User profile for user: satcomer
satcomer
User level: Level 4
1,575 points

Posted on Oct 11, 2010 4:12 PM

When you first powered up the Mac, did you have a Domain Administrator make a Administrator account on that Mac? Then to bind the Mac open System Preferences->Network, Advanced button to bring down the Advnced networking and set the Static IP (given to you be the Domain Administrator) and WINS server IP and setup. Plus make sure the Apple Mac is using the same Time server4 as the reset of the cmputers on the domain.

Then go back out to System Preferences->Accounts. Click on the Administrator's Account (make sure the padlock is unlocked in the pane) and hit the "Join" button. In the pop-up have the Domain Administrator click on the button for 'Directory Utility'. Put in the Domain info in this application by hitting the pencil icon to add account info. that Administrator can then follow his nose about saving this information and powering it onto the domain.

Lastly make sure they make a Domain record with the Mac's machine name and information like any other new computer to the Domain.

Once you get it on to the Domain read the blog hint How to prevent .DS_Store file creation to prevent those pesky files on Windows shares.
View in context
2 replies
Question marked as Top-ranking reply
User profile for user: satcomer
satcomer
User level: Level 4
1,575 points

Oct 11, 2010 4:12 PM in response to Reiklen

When you first powered up the Mac, did you have a Domain Administrator make a Administrator account on that Mac? Then to bind the Mac open System Preferences->Network, Advanced button to bring down the Advnced networking and set the Static IP (given to you be the Domain Administrator) and WINS server IP and setup. Plus make sure the Apple Mac is using the same Time server4 as the reset of the cmputers on the domain.

Then go back out to System Preferences->Accounts. Click on the Administrator's Account (make sure the padlock is unlocked in the pane) and hit the "Join" button. In the pop-up have the Domain Administrator click on the button for 'Directory Utility'. Put in the Domain info in this application by hitting the pencil icon to add account info. that Administrator can then follow his nose about saving this information and powering it onto the domain.

Lastly make sure they make a Domain record with the Mac's machine name and information like any other new computer to the Domain.

Once you get it on to the Domain read the blog hint How to prevent .DS_Store file creation to prevent those pesky files on Windows shares.
Reply

Unable to bind to Active Directory

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up