Managed Client 10.7.5: when admin logs in, unit loses admin

Question

A weird issue I'm trying to pin down:

Managed Lion MacBook, running 10.7.5, bound to a Mavericks 10.9.5 server.

When logging in as the local administrator, Local admin logs in successfully, but when

desktop is presented, machine forgets somehow the admin is logged in.

I can tell becasue if I go to Apple Menu-->and try to select Logout Admin,

I'm instead shown "Logout....". Also, trying to access system preferences

causes it to crash ( the icon bounces once and then stops).

I've tried:

1. Re-imaging the machine...works fine until I have it bound to my OD and AD and then upon reboot it then freaks.

2. Making sure my System is clean and up to date.

3. Trashed Managed Prefs several times...this restores functionality until again it is rebooted and then when it picks up

new preferences, it goes squirrley again.

4. Checked my MCX records in WGM, and nothing shows to be managing the local users or making the local users

act or behave this way.

Any thoughts on where to troubleshoot further?

iMac, Mac OS X (10.6.8), FCS 3, iLife 09, iWork 09

Posted on Jun 10, 2015 1:34 PM

Reply

Answer 1

In testing yesterday further, trying to access the local administrator's Library folder seemed to be the key culprit.

On the affected client, logged in as the local administrator, I could not get the Library folder for

that client accessed. Not through Terminal, Not through Finder ( with option key selected).

This would explain why System Prefs would not open, and why the local admin was not recognized as a user.

Taking this further, I then rebooted the problem 10.75 client, and

it seems that taking one of the infected 10.7.5 clients, and booting to Recovery drive, and

then setting the "Repair ACLS on this account" under the Reset Password box, addressed the issue.

With Resetting the ACLS, and then rebooting, the machine then acted as if it knew it was logged in

as Admin, and I could open the system prefs panel without fail.

So now the question is what is causing the ACLS to become corrupted on the Lion Installed Managed Clients.

And two, is there a way to fix this say through Terminal, without having to boot each one ( 90 clients total)

into recovery mode and fix the ACLS?

Reply