12-14-2021 10:20 AM - edited 12-14-2021 10:30 AM
Hi everyone,
I work for a High School and I'm having a hard time figuring out the root of this issue. They authenticate via Google, then type their local password, to get an error message saying "You are not allowed to log in at this time".
Though, this is working on a few users of the same groups and all, so the inconsistency is throwing me for a loop.
When I call for JamfConnectLogin.log, I get: authorizationhosthelper.x86_64[4394:7709] [com.jamf.connect.login:KeychainAdd] Tried to get the login name but couldn't find it.
macOS Version: 11.6.0
JamfConnect 2.6
Anyone have any ideas? Would be much appreciated.
Solved! Go to Solution.
Posted on 12-14-2021 10:32 AM
Look for a configuration profile applied to the machine with a Login Window payload. Under Access, there is an option to deny login for any local users:
This may have been applied to the machine if it was once bound to an on-premises Active Directory server. Turn the first option - "Local-only users may log in" - back on OR unscope the config profile from target machines.
Posted on 12-14-2021 10:32 AM
Look for a configuration profile applied to the machine with a Login Window payload. Under Access, there is an option to deny login for any local users:
This may have been applied to the machine if it was once bound to an on-premises Active Directory server. Turn the first option - "Local-only users may log in" - back on OR unscope the config profile from target machines.
12-14-2021 10:37 AM - edited 12-14-2021 10:58 AM
Nailed it! I had set an inactivity log-out under "options" in that config, and had that "Local-only users may log in" setting turned off. Appreciate you!