Skip to main content

Hi everyone,

 

I’m looking for the best way to convert mobile accounts to local accounts without using Jamf Connect, and to do it cleanly. The goal is to improve compatibility with FileVault, since it generally works better with local accounts.

 

I’ve tested version 3.0 of https://github.com/BIG-RAT/mobile_to_local.

The script seems to correctly convert the mobile account into a standard local user and successfully removes the Mac from the domain.

However, after that step, I wanted to test joining the domain again the rejoin works, but I can no longer log in with any AD accounts. No matter which account or password I use, authentication just fails.

 

Has anyone else experienced this issue or found a more reliable method ?

 

Jamf connect has a demobilize workflow that works perfectly fine. It does not change the UDID of the account, so if you look at that it will still appear like a mobile account with a really high number rather than a 5## number.

 

As far as rejoining the Mac to the domain, this is not a supported workflow. I would expect that you are confusing macOS as the user identity already exists on the device. If you wanted to rejoin the domain, you would want to delete the user account and let it be created through that OnDemand workflow.