user account – authentication is disabled – How to verify whether this is local disabling or Active Directory disabling

Spread the love


Advertisement

I have a Macbook Pro that uses ActiveDirectory for authentication. However, when I go to System Preferences to make changes, it gives me the following error:

Advertisements

If I run dscl . -read /Users/<username> AuthenticationAuthority, everything seems to be ok but I think that the local password has become out of sync with ActiveDirectory.

Is there a way to tell my local account to resync with ActiveDirectory?

Or is there a different interpretation of what might be going on?

I tried this soln (seen here https://www.reddit.com/r/macsysadmin/comments/ahhpdd/password_mismatch/?utm_source=share&utm_medium=web2x) root> Sysadminctl -secureTokenOff <username> -password <AD-pwd> interactive but am not able to disable my own SecureToken.

Author: Subham

Leave a Reply

Your email address will not be published. Required fields are marked *