Mac that is binded to windows domain issues

[IA76]

Hi

 

I have a Mac on the latest OS that is binded to a Windows domain but I have a few issues.

 

1) Even if I login with windows domain admin user account I can't make any admin changes in the Mac OS. How can I allow my windows domain admin account to have admin access?

 

2) How do I login with the original administrator account that is setup on the Mac? When I enter the username and password in the login screen it is not accepting it.

 

If I login with a normal user account I can see the original administrator account in the list of users but it is greyed out.

[DalekSec]

1) When you bind the Mac to the domain using Directory Utility there is an option in there to make domain admins admin of the Mac

2) I don't know never tried it can give it ago tomorrow!

[IA76]

1) When you bind the Mac to the domain using Directory Utility there is an option in there to make domain admins admin of the Mac

2) I don't know never tried it can give it ago tomorrow!

 

I must have not spotted this option when I did the bind so my last resort seems to be logging in with the original admin account which doesn't seem to be logging in at the moment.

 

I did spot that there was an AD account that had the same username as the original admin account on the Mac. I have deleted the account in AD but still can't login with the original admin account.

[3s-gtech]

The original administrator account should work, with the same password as originally set. It’s greyed out so that you can’t edit or delete it. You may struggle if your search list places network accounts above local, and you have a domain account also called administrator. You’ll need to alter the search list on the client via Directory Utility.

[IA76]

The original administrator account should work, with the same password as originally set. It’s greyed out so that you can’t edit or delete it. You may struggle if your search list places network accounts above local, and you have a domain account also called administrator. You’ll need to alter the search list on the client via Directory Utility.

 

The problem I have is that it won't let me change any of these settings without an admin account.

[3s-gtech]

I think you'll need to boot into Single User mode to fix it - just an unlucky clash of settings it sounds like. Are you not even prompted for an admin password when you try to make changes? That should look locally first.

[IA76]

I think you'll need to boot into Single User mode to fix it - just an unlucky clash of settings it sounds like. Are you not even prompted for an admin password when you try to make changes? That should look locally first.

 

I'm not a Mac user so appreciate the help with this.

 

Yes, it does open the username/password prompt when I try and make changes. I enter the original admin username & password and just get the 'screen shake' where it doesn't accept it.

 

The original password was linked to an iTunes account. Is it worth trying to change the password on the iTunes account and then trying logging in with the new password?

[3s-gtech]

All sorts of interesting things may happen there, if it's linked to iCloud etc. It may sync the password back, but if it's the default standard administrator account I very much doubt it. I think it's looking more like Single User Mode is your solution here - that gives you access to a shell to make changes. https://apple.stackexchange.com/questions/164331/i-dont-have-administrator-account-on-my-mac

[IA76]

Thanks for that. Will give it a try later and hopefully it should work.