cannot change mac password after upgrade

What I mean is, when someone has an AD account set up and then logs in to a Mac, at that point it grabs the 180 day policy and runs with it. IMO, it seems as though the 180 day policy that Active Directory has set is somehow being cached by the Macs. Other accounts seem to be able to log in just fine, so it doesn't appear to be a binding issue. For example, I just imaged a brand new machine with 10.9, bound it to Active Directory (Did not bind it to OS X Server), and still will be told to reset my password on the affected account.Ĥ. I can reproduce the issue on any Mac bound to the domain, no matter what Mac OS and when it was bound. Unfortunately at this moment I do not know the old password for the account that can reproduce the issue, but I may have it shortly.ģ. On a few occasions, the user with the problem has reported being able to authenticate and login with their OLD password.

I have an account that I have credentials to that is displaying the issue as of now. They will then get frustrated, go over to a PC and log in just fine there.ġ. They are told they need to change their password before they can log in, even though they have changed it recently (Active Directory is set to force users to change their password every 180 days). Every so often, we get someone who cannot log into ANY Mac. In the Library, there are a wall of Macs, and right on the other side, PCs. They bind/unbind perfectly as expected, and the majority of users can log in just fine. The majority of the machines are running 10.7.5. These Macs have some prefs being set by a Mac OS X server, but nothing regarding Open Directory. Particularly, in the Library and certain kiosk machines, we have Macs that are bound to an Active Directory domain (I don't administrate this, just the Macs). They are told they need to change their password. Basically certain users cannot log in to active directory bound machines. I have an issue plaguing the school I administrate.

Cannot change mac password after upgrade