Posted on 12-04-2019 04:54 PM
Hello All,
I am looking for any advise because I am out of ide
as. All of our Macs are domain bound and sporadically experience an issue not allowing logins. It is mainly occurring on lab machines. It seemed disabling the following fixed the issue:
Use UNC path from Active Directory to derive network home location
Network protocol to be used: smb:
Wonderful -- but disabling that has created a new issue. We rely heavily on scripts to mount network homes. It seemed to break the "SSO Like" feature. Whenever a user would login to a lab machine their network home would be mounted and a SymLink created so they could easily save.
We are moving away from storing mobile home directories on machines, so it is imperative that the "H Drive" works.
Any help is much appreciated! Here are some screenshots for background. We are also binding via configuration profile -- but have excluded that from being the issue as it is happening on non-Jamf Macs. I am out of ideas and any help is much appreciated :)
Posted on 12-05-2019 09:14 PM
In my experience MacOS won't allow the user to login if the home folder does not exist or the user does not have the correct permissions to it (and the Use UNC path option is ticked). It gives a non-descript 'user couldn't login' message.
Posted on 12-05-2019 09:26 PM
We create a mobile account for all users. It caches their credentials when a local home directory is made. If you do not create a mobile account they will not be able to login off-site.
The best way to test this is to check the box manually on a test computer, login as a new user on that computer, disconnect from all networks and then log back in again. If you can login with the new user account created on the computer then the issue is fixed.