JimmyCMPIT

Q: Prohibitory icons in user folder, rights show r/w, Active Directory

I was brought it to look into an issue where a user in an active directory setting had their password changed and when they logged back in the items on their desktop did not appear.

 

The user is a network user and does not have administrative rights, and I have not been given administrative credentials to fully access the system which is running 10.10.5

 

at this time the users account is the home account, but an identical names account with the appended name "(disabled)" is also present in the users folders

both folders have the desktop, downloads, etc folders showing a prohibitory sign but the rights show the user has "Read and Write" for the folder inside their home folder (I can't log into the disabled folders through that account) but even when I had someone from the offsite IT department who's responsibility it is to administrate these systems unlock the account and there I was unable to change this lockout.

booting in safe mode would not allow the user to log in, and booting without the network cable connected caused the same lock out. Again I had the admin unlock the disk utility to try and repair permissions but there was no change on either account.

We have a TM Backup but browsing to that backup also shows the desktop folder is blocked for the history of the backup.

In comparison to another users computer on this network the other users home folders are not locked.

 

As stated my ability to look deeply into this system is prohibited by a contracted outsourced support body who are likely unable to provide me with credentials and would rather keep support on their side despite the fact they are not providing it.

 

I think the account may be boned and I think the user having their password changed boned it, the problem is other users in the department will be forced to change their password shortly and this could become a far more serious matter.

 

Any thoughts?

Mac Pro, macOS Sierra (10.12), Dual Xeon 2.4, 64 GB RAM

Posted on Oct 19, 2016 11:45 AM