Greetings,
Occasionally we run into an instance where a FileVault enabled AD user using a mobile account changes their password somewhere other than System Preferences.
FileVault expectedly falls out of sync, and we have a variety of workarounds, especially if the OLD password is working.
But many times it is not, and currently I have a system that will not generate a secure token for any user on the system. We've decrypted, updated to 10.14, and tried getting a new SecureToken by blasting the .AppleSetupDone file and creating a new account but nothing gives in this instance, which is strange because while its a last resort, removing the AppleSetup file has worked in the past.
Any tips are appreciated (besides stop using AD binding lol)
