Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Connected to Domain but can't log in using Actived Directory Credentials

Hey everyone. I've been working on this issue for two weeks now, and I don't know what else to try. I'm connected to my domain but cannot get my Macbooks to log in using Active Directory credenitals both through our wireless network, and hard wired with an ethernet cable. The weird part about it is that it is not uniform all across our network. This only happens to certain Macbooks and as of right now there doesn't seem to be a pattern. I can say that it has happened to all new Macbook Pros that we have ordered lately though.


We use Jamf to manage our Macs on our network, and ever since upgrading to a new version (9.01 and now 9.1) we have had this issue. However I can't connect after manually adding the domain either, so for now it makes me think it is not a Jamf issue. Has anyone dealt with this issue before, that might know of a fix? Thanks!

MacBook Pro, OS X Mountain Lion (10.8.4)

Posted on Sep 19, 2013 7:45 AM

Reply
Question marked as Best reply

Posted on Feb 3, 2017 8:17 AM

Hello,

I fix the same problem just adding the MS Network Admin ID & Psw in the following steps:

User uploaded file

Click on "Not authenticated" icon and fill the information below.


User uploaded file


Remember, it has to be the ID and password of a user with admin rights.

OK. and restart/logout and login to the domain.

Regards.

Luis.

15 replies

May 12, 2017 8:34 AM in response to burnettb1

Have you turned on FileVault 2 encryption? If you have, you can enable your third account by doing the following:

  1. Open System Preferences
  2. Click on Privacy & Security.
  3. Click on the FileVault tab.

There should be an Enable users... button showing in the FileVault preference pane. Click it and you should be given the opportunity to enable the third account by providing the account's password.

On restart, the third account should now appear at the login screen.

Jul 14, 2017 5:02 AM in response to burnettb1

It ended up being something really simple for me. In System Preferences and under Users and Groups, I unlocked Login Options with the local admin account and near the bottom of the Login Options screen I found that "Allow network users to log in at login window" was unchecked. I checked it and voila! I was able to log in with network accounts.

Oct 17, 2013 3:24 PM in response to burnettb1

Hi Burnettb1,


I have come across a similar issue as yours. I have included the instructions that I use to bind the Mac at my institution. In regards to wifi, I have not tried binding the Mac over wifi. Should you need to log in to a Mac with domain user credentials I would suggest to bind the Mac over ethernet. Once you get to the:


*Click on triangle to the left of Show Advanced Options to expand"


portion of the instructions click on the Mappings tab and select the checkbox for creating a mobile account at login. This will create a domain user profile on the machine that you can log into when not connected to the domain.


Hope this helps.




BIND iMac:

Login into iMac using administrative credentials


Open System Preferences

*Goto Users & Groups

*Click on lock in lower left-hand corner

*Use same password used to log into iMac

*Click on Login Options


*Click on ‘Join...’ button right of "Network Account Server: "

*Click on ‘Open Directory Utility…’ button

*Click on lock in lower left-hand corner

*use same password used to log into iMac and click on Modify Configuration

*Double-click on Active Directory


Active Directory Domain = domain

Computer ID = name of Mac

*Click on triangle to the left of Show Advanced Options to expand

*Click on Administrative tab

*Check Prefer this domain server

Type domainserver_ipaddr -or- servername.domain in this field

*Click on ‘Bind…’ button

*When prompted for network administrator login

username = [domain admin user]

pwd = [domain user password]

*Click OK (Note: search path will be updating. Until completed the ‘OK

button will be greyed out


*Click OK


*Click lock to lock and close window

*Click lock to lock and close window


BIND CHECK:


*Search AD for added mac host - it should be there.



Open Terminal app by either:


1)

*Press command+spacebar

*Type Terminal and select app


2)

*Click on desktop

*Press shift+command+A

*Goto Utilities folder located within Application folder (which you should

be in) and open Terminal


*Once Terminal is opened type in id [domain username] and press return key. The output should be

some some network account information

*Close app by pressing command+Q and any other opened windows

*Restart iMac

*Log in

Oct 21, 2013 11:04 AM in response to RudiBee

I have the same problem as burnettb1 on an iMac (OS 10.8.5). When I run the command you mention in the Terminal I get: id: citi: no such user (citi being the Windows domain admin account I was querying).


I find this odd because when I'm looking at the Directory Editor in the Directory Utility (under Users & Groups > Login Options > etc.) I see the citi account just fine. I can even authenticate within the Directory Editor as citi.



-Pat

Oct 30, 2013 5:55 AM in response to RudiBee

I actually found the solution to my problem. I checked Active Directory to see if it was automatically creating the record of the new computer and it wasn't. I could bind to the Domain however, and it gave me a computer name, but like I said it never showed in AD so I ended up having to do several things.


First I went in and created the computer record in Active Directory and moving that record to the correct OU. This didn't help. I then renamed the computer itself. This also didn't fix anything so I check settings on the computer.


After going into System Preferences, and then Users and Groups, editing the domain, and opening Directory Uitility, I opened Active Directory there and found that the computer name listed there was different than the computer name that I had created in locally. It won't let you edit the computer name so I unbound the computer from AD here and rebound it using the correct computer name.


I tried it again with the same result (it wouldn't log in). I then went to advanced options, clicked the Administrative tab and checked "Prefer this domain server," added our domain, and unchecked "Allow authentication from any domain in the forest." This didn't fix my issue either so I lastly tried the "Search Policy" tab in Directory Utility again. I took out the default setting which ended in /All Domains, and added our domain here.


After all of this, my new computers will now log in using Active Directory credentials. I hope this helps someone out there. It took me a long time to figure it out but I learned a lot in the process.


Now I just wonder if there is a way to automate this process during imaging so that I don't have to manually do this to each of our computers. To everyone who helped me with this thanks for the responses!

Connected to Domain but can't log in using Actived Directory Credentials

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.