Skip to main content
Solved

Open LDAP accounts to Local accounts

  • October 29, 2020
  • 2 replies
  • 11 views

Forum|alt.badge.img+4

Hello there,

I was wondering if there is a way to convert Mobile accounts from Open LDAP (Mac Server OS) to local accounts as I noticed that some of my users are not getting all policies/configuration profiles to work right and I assume its because of this.

Thank you all.

EDIT 1: Solution in comments below.
EDIT 2: Once we removed the "mobile" from the accounts everything worked out fine.

Best answer by ivelazquez

SOLUTION:
1. Objective device must have at least 1 local admin.
2. Login to local admin account.
3. Delete Mobile Account, keep home folder where it is. Don't move it.
4. Go to "/Users" and rename home folder from "username (eliminated)" to "username".
5. Create new local account, it must have the same username. Select the option to "use existing home folder".
6. By doing this all the info still there, the only thing that is halfway lost is the Keychain.

Users will have to login on their office 365, email, and apps account

Petition: If someone can do a script for this issue so it can be automated, it would be great to share.

2 replies

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • 7886 replies
  • October 29, 2020

Take a look here:
https://derflounder.wordpress.com/2016/12/21/migrating-ad-mobile-accounts-to-local-user-accounts/

It was designed to go from AD mobile accounts to local accounts, but it's possible most of the same process will work for Open LDAP accounts. I can't say because frankly its been a good many years since I've used Mac OS Server accounts on any Macs.


Forum|alt.badge.img+4
  • Author
  • New Contributor
  • 1 reply
  • Answer
  • October 30, 2020

SOLUTION:
1. Objective device must have at least 1 local admin.
2. Login to local admin account.
3. Delete Mobile Account, keep home folder where it is. Don't move it.
4. Go to "/Users" and rename home folder from "username (eliminated)" to "username".
5. Create new local account, it must have the same username. Select the option to "use existing home folder".
6. By doing this all the info still there, the only thing that is halfway lost is the Keychain.

Users will have to login on their office 365, email, and apps account

Petition: If someone can do a script for this issue so it can be automated, it would be great to share.