I have a MacBook Pro running 10.4.8. I joined a Windows 2003 Domain successfully. But when the MAC reboots I am not prompted for a username and password to log in to the domain. How can I force this?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I configured the MAC by clicking GO > Utilities > Directory Access
I set the AD forest and domain then bound it. This looks like it worked because I tried a bad pw for the administrator and it knew it was wrong. It let me "bind" with the right password.
The user is still always prompted to access domain resources. I've found that I can access shares with the local user password or the domain password.
In my environment, I add all Macs to the AD domain using this process. It changed a little from 10.3 to 10.4 and I can't remember which version I wrote the documentation for, but it was fairly easy to make the necessary adjustments between them. You've probably already done some of this, but here's all of it anyway.
1) Add the computer account to AD in the desired OU.
2) On the Mac, go to Directory Access, Services, Active Directory, Configure
3) Enter the appropriate AD Forest, Domain, & Computer Name (from Step 1), then Bind
4) When asked for the computer OU enter the LDAP OU (ex. "cn=organizatinal units,dc=mydomain,dc=com")
5) After binding, under Advanced Options, select Cache Last User & Authenticate in Multiple Domains, enter the preferred domain server and any AD users or groups that you want to give admin rights to. It's better under 10.4 than 10.3, but not all admin tasks can be completed by users listed here, although most can. You sometimes need to manually add to the admin group after the user has logged on the first time.
6) go to Services, LDAPv3, Configure
7) enter the LDAP server name or IP. If required, configure "Use Authentication When Connecting" and enter the full user name (ex. cn=username,cn=users,dc=my
8) go to Authentication, Custom Path and add the AD & LDAP entries that you created above
If you have a local account with the same username as a domain account, the local account needs to be removed before that account will be able to log on (it checks local authentication first). Also, your DC needs to be configured to allow this - go to http://support.microsoft.c
Netman - for OS X you do not need the microsoft client. That is only needed on OS 9 & earlier.
Business Accounts
Answer for Membership
by: mikeleebrlaPosted on 2007-02-08 at 14:35:50ID: 18497889
i'm 99% sure you can't force this and the reason is pretty simple. It would be a rather large security hole if any machine 'automatically' authenticated to the domain. Why have security at all if any machine is 'automatically' authenticated???