I support the mac osx clients for my company and one thing that the end users complain about is not getting notified when their Active Directory password is about to expire. I'm sure there is a setting somewhere but can't seem to figure out what it is.
Any help is appreciated...
MacBook Pro (Retina, 15-inch, Mid 2015), macOS Sierra (10.12.4)
Hello Altamira-Technologies-IT,
Are these machines bound to the domain and are the accounts setup as mobile users? Supposedly, that is something you can't turn off: https://www.jamf.com/jamf-nation/discussions/18065/active-directory-password-exp iration-login-prompt
Etresoft,
The machines are bound to the domain and set up as mobile users. The problem isn't that I want to turn the notifications off, I want to turn them on because my end users are not seeing them at all.
Hello Level 1,
If you have FileVault2 enabled (most Corps. do), this masks the AD password expiry notification. If the user logs out of their session (not shutdown or sleep) and then logs in. Do they get a notification then?
Thanks, we do have FileVault2 enabled and didn't realize it masked the expiry notification. We have since gone a different route and found a utility called NoMAD (http://nomad.menu) which seems to provide a solution we can live with.
Yes, I know. I thought that link might give you some hints about where to look. This feature has always worked anywhere that I've seen with Active Directory.
How do I get notified of my Active Directory password expiration?
