Computer does not recognize credentials

[JamfAdmin2]

Hello everyone,

If a user restarts her Mac device and the computer does not recognize her computer password does that mean there is a a syncing issue with the local account password and the network credentials?


What would be best practice to resolve this sort of issue?

[AJPinto]

The best practice to sort out the issue really depends on what the issue is.

My gut says you have FileVault enabled, and the user does not have access to FileVault. The best practice for that is for 1:1 device deployments, where the user is forced to enable FileVault when the log in for the first time.

[JamfAdmin2]

Thanks for the response, I checked the device in jamf and it is encrypted, to force filevault can we have a config profile created to use as a break glass sort of scenario if it happens again?

[AJPinto]

Your options with FileVault are very limited due to the nature of what FileVault is. If the user cannot get logged in to FileVault, there is no way to get the Mac Online to receive any new configurations from Jamf like one to turn off FileVault.

• If the user forgot their password, there is a workflow that macOS has where you can provide them with a recovery key to reset their password and get them in. However, this will only work if the user has access and just forgot their password.
• If you are using a deployment workflow that enables FileVault before the user gets the device, or are in a lab situation (multiple users to one device) you will need to manually grant FileVault access which requires the users password and the credentials of an account that already has FileVault access.

[mvu]

Need more info on your setup, but yes, if you're using a FileVault configuration profile to encrypt and escrow the recovery keys, you could use these recovery keys as your break glass moment. 

[Shyamsundar]

Either use JAMF Connect or PSSO which keeps sync your Network password to Mac login Password