All,
If you use SMB shares etc it may break self service if you have Security Update 2017-001 installed on High Sierra endpoints as it did for me, installs stick on executing. The following command in a policy will fix it scoped on those that have been patched.
sudo /usr/libexec/configureLocalKDC
Apple have apparently since fixed this and released an updated patch but no change to version so maybe sending the updated version out may eliminate the need to run the above.
