Disable network user login

Hi forum,
I installed Mac OS X Server for development reasons in a virtual machine. After I restarted my Mac (not the VM), I had to select a user. The choices are my regular account or other network users.
As I am not really connected to a Mac OS X Server - how can I get rid of that "other user" option?
I have already removed "LDAPv3" and "ActiveDirectory" from the directory services list, but this did not help.
Cheers,
Sven
PS: I am running a German version, so I translated freely... therefore the wording might not be accurate.

I finally found the source of the 'error'. First of all: there was no error, everything works as designed.
After executing 'dscl . -list /Users UniqueID' I found an user with the ID 501. This user was created by an application I installed in the same session when I ran the OS X Server VM. I did not expect that application to add a new user, so I suspected OS X to be the cause.
So after all: the topic of my thread is actually wrong. Thank you very much for your time, Björn. I am sorry, that it was a kind of fake error.

Similar Messages

  • Network User Login Hangs at 'loginwindow' Occasionally

    The client is a macbook pro (2012) with 10.8.5, the server is a mac mini also running 10.8.5 (w/ OSX Server).
    Network user logins usually work fine.  About 10% of the time, however, the loginwindow displays a spinning beachball endlessly after the name/password are supplied.  The workaround is to login to the client via ssh and 'kill -HUP' the user's loginwindow process; then the next login attempt will work.
    Examining logs, I find that the 2nd through 4th lines of the following sequence of messages appear on the client in the case of the above failure (in the case of a successful login, only the first line appears)...
        Apr 26 08:20:06 whbbook.local WindowServer[153]: Display 0x04248a6a: MappedDisplay Unit 2; ColorProfile { 2, "Thunderbolt Display"}; TransferFormula (1.000000, 1.000000, 1.000000)
        Apr 26 08:20:07 whbbook.local SystemUIServer[36439]: CGSCopyWindowShape: pid (36439) passed NULL window
        Apr 26 08:20:07 whbbook.local SystemUIServer[36439]: could not update menu bar region, 1000
        Apr 26 08:20:07 whbbook.local SystemUIServer[36439]: CGSSetWindowTransformAtPlacement: Singular matrix [0.000 0.000 0.000 0.000]
    Google reveals nothing helpful for the search phrase 'SystemUIServer CGSCopyWindowShape'.  I suspect the underlying cause of the symptom has to do with the fact that SystemUIServer ended up with a NULL window.
    I've already done the usual 'couurtesy' steps of a disk permission repair and a safe boot on both machines.
    Any interpretation of this, or recommendations?

    Check if this works :
    http://social.technet.microsoft.com/Forums/windows/en-US/452798be-30fb-4357-bd6f-827976e3637a/please-wait-for-the-user-profile-service-slow-logon?forum=winservergen
    Arnav Sharma | Facebook |
    Twitter Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members
    reading the thread.

  • How to disable Guest User Login

    All of a sudden I have a "Guest User Account" on my login screen.  I never enabled it, and it wasn't there before.  I checked my Users preferences and it clearly shows the Guest User Account is disabled (nothing checked).  Any ideas how to remove it from my login screen?  Thanks.

    Larry McJunkin wrote:
    No, that is not enabled.  It is for my iPhone but not my MacBook. Any other ideas? 
    See: http://osxdaily.com/2011/10/13/disable-guest-user-account-mac-os-x-10-7-2-login- screen/

  • Network user login not always correct

    I am using OS X ML (Mac mini server, 8GB RAM, ML 10.5.8) with several clients (mainly iMacs) logging in the OD. Most of the time the login process seems to work OK, but apparently something goes wrong and the trash is not correctly recognised (getting the infamous "items will be deleted immediately"). Logging out and then again in (sometimes this must be done repeatedly - 3 or 4 times) usually settles it and the trash behaves again normally.
    Any idea why?

    The Snow Leopard/Mac mini Server is bound to the Leopard Server directory. And on the Snow Leopard Server the Network Account Server is set to the Leopard Server. The only issue I am having is that I have a network account, but I cannot login into the Snow Leopard Mac Mini server as a network account user, although I can login into the Snow Leopard Mac mini server as every other network account user on my network. AND I can login into my network user account form the other Leopard Client machines in my office.

  • Network user login keychain

    Guys,
    Got one of my network users using his network account - he has an RSS aggregator that's continually popping up and asking to use his login keychain password. I mean "continually" - 20-25 times a day. Now the reason it needs it is fine - he's accessing feeds from one of our own wiki servers which also authenticates using his network user account, however I've set it to "Remember this password" to no avail.
    I've even trashed his login keychain and created a brand new one, but still no joy. Has anyone got any incredibly helpful suggestions, lol?
    This is also posted in the 10.6 server section (since that's the OD server that manages his account).
    Thanks (hopefully) in advance,
    Matt

    Ok then, I got one for you. Similar sort of thing. Just created a 10.6 server, created all the relevant users within WGM, then imported the home folders from the previous 10.5 server. Ensured all new UIDs matched the UIDs from the 10.5 WGM because it then simplifies permissions - i.e. all the permissions are recognised by the new server automatically for the right users.
    Now for one of my users, her login keychain is never open by default. When you start Keychain Access (she's on 10.5.8 btw) you get the System keychain and the System Roots list of certificate authorities, but no login keychain.
    Have checked the permissions of her ~/Library/Keychains/ folder and they're correct, as are the permissions for ~/Library/Keychains/login.keychain.
    Double-clicking on the login.keychain file opens it up just fine in Keychain Access, however as soon as you close KA and re-open it, the login keychain's gone again.
    I've tried importing a keychain, adding an existing keychain (obviously the login one) and creating a new keychain called login, none of which work - there's no error, it just ignores me.
    I'd rather not create a temporary user account, transfer all the docsuments/mail etc, delete the original and recreate a new one using the old name and copy everything back, but unless someone can help me out, that's what I'm going to have to do.
    There has to be some guru's out there somewhere that can help???
    Thanks in advance,
    Matt

  • Network User Login on Server: 2 questions

    I'm configuring a small home network using Mavericks Server and have a question about logins.  My concern is based on this note:
    http://support.apple.com/kb/TS3090
    My configuration:
    iMac 2.9 Ghz Intel Core i5 running Mavericks Server
    MacBook Air 1.8 GHz Intel Core i7, OS 10.7.5
    MacBook Pro  2.5 GHz Intel Core 2 Duo, OS 10.7.5
    MacBook 2 GHz Intel Core 2 Duo, OS 10.6.8
    My goal: serve all accounts from the iMac with networked home directories, allowing users to log in from any machine - including the server - and work.  The above tech note seems to rule this out - but I want to be see if there is a configuration that will allow me this freedom.  We have 4 users and three client computers.
    Thanks!

    I cannot say for sure that concurrently using the server as a client does not work but my two cents are below.
    I do exactly what you are on a slightly larger scale. We have 8 users who share 7 machines. All users can log in on all machines except our server. I have been running an Apple server for the last 20 years.
    I understand the financial impact of adding hardware in a small business. I also don't want to be the guy to tell your idea is not a good one, but general practice for most here is to have a dedicated machine. Mini Server can be bought for $1000. Minis for less and server added for a nominal charge.
    An example why a dedicated server machine would be important:
    Network user has logged in on the server machine and an application they are using crashes and winds up freezing the server. All users are then suffer from problems because their network accounts cannot write back to the server. Open files each user had may wind up corrupted causing loss of productivity or loss of vital data. User preferences may wind up corrupted. Every user in your office now cannot get any work done until you come back to fix it.
    Our dedicated server gets "confused" sometimes, lets say once every few months, and some of the same problems above occur. Periodic reboots reduce problems we face. If you run a server and use it as a client I would expect issues on a weekly basis.
    Hope this helps. Good luck.
    -Erich

  • Mac OSX Lion Server Network User Login Issue

    We have in the office a server running Mac OSX Lion, and several network users who've all been running happily for quite a will.
    About a month ago I was added to the system, and initially we had a few issues relating to the home directory, but we changed 'something' and it all worked.
    Fast forward to now, and we've added a new user - Hannah - to our system.
    I've added her in the Workgroup Manager, and set her up everywhere I can find on the server. Her home directory creates on the server fine.
    She appears in the Logon list on the client machines, and here's where the trouble starts...
    Every time she tries to log on, it fails. The logon box just bounces or wobbles as though the password is incorrect. We've tried changing the password, to no avail. We've tried adding new test users - same problem.
    We've tried sudo kinet on the Terminal as a local user, with variable results.
    I'm at my wits end, and really hoping someone here can help offer some suggestions or advice we can work through to get to the bottom of this.
    Thanks in advance!

    Your problems are likely occurring because you added her to the directory with Workgroup Manager.
    You should really start avoiding WGM when at all possible as Apple is clearly moving away from it. Because of this, things don't always work as expected when using 'legacy' tools like WGM.
    My guess as to what your problem is: When you create a new user in Server.app, two things happen for you automatically that WILL NOT HAPPEN if done from WGM.
    First the user is added to the default "Workgroup" group.
    More importantly (and the source of much confusion), the user is automatically added to SACLs.
    Check the SACL for the user in Server.app, I bet you'll notice that they aren't a member of the File Sharing group like they should be. To solve this problem, you can either delete the user and recreate them in Server.app, or manually add them to the appropriate SACL.
    I would opt for recreating them in Server.app if I were you, as I don't trust user accounts that originate in WGM on Lion Server.

  • Help Needed - Network user login

    Hi Guys,
    Need help.
    I Have a network of imac's which connect to a leopard server OD master. All my user can log on apart from one machine, where none of the users can log in to.
    I have checked the username and passwords and are all correct, but on this one machine the logon screen just shakes just like when a incorrect password is entered.
    Any ideas

    I'm not sure if this is relevant to your situation (which has probably been long solved), but it might help others reading this thread: I've been experiencing a similar problem with network users not being able to log onto a machine and I learned from this thread (http://discussions.apple.com/thread.jspa?threadID=1788420&tstart=30) that network users must have a home directory defined in WGM, even if you're not using networked home directories. Admittedly, the fact that your users could log in from all but one machine suggests that the problem was more likely on the client machine than the server.

  • Disable multiple users login with single user id

    hi,
    I have a problem. I give a single user id to a  person and many people login to the server from different computers through that id.
    Please tell me how to block that only one user can login with a particular id at a particular time

    Hi Balaji,
    To disable multiple logins add parameter login/disable_multi_gui_login = 1 using RZ10
    Hope this help!
    Juan
    Please reward with points if helpful

  • Disable Multiple User login for ITS

    Hi,
    The parameter “login/disable_multi_gui_login” Controls the deactivation of multiple dialog logons at GUI level only.
    Please let me know how to activate the same if the users are logging in thru Webgui (ITS 6.40 / 7.00).
    Thanks,
    Tanuj

    Hi Balaji,
    To disable multiple logins add parameter login/disable_multi_gui_login = 1 using RZ10
    Hope this help!
    Juan
    Please reward with points if helpful

  • To disable user login on a solaris 10 server

    Hello Everybody
    I want to know how to disable further users login, if suppose there are 10 users already login on a server & I don't want any more user to login on a server without getting those exsisting users to logoff.
    Regards

    I suppose you could write a wrapper script that uses who to count the number of connections and then:
    touch /etc/nologin
    to disable further logons at some arbitrary number. Then you could stick the script into cron and let it do it's thing.
    alan

  • How can I restrict Lion to only allow certain network users to login when bound to an Active Directory?

    Hi,
    I'm trying to find a way to configure which network users can login to a lab of iMacs running 10.7.4. They're being deployed using DeployStudio, and the Macs are bound to an MS Active Directory by a script that runs as part of the workflow. I'd like to have another script run after the AD binding to permit only users in certain AD groups to be able login to them.
    I'm halfway there, in that using dseditgroup I can easily add AD groups or individual users to the relevant group (deseditgroup -o edit -a <domain\\group name> -t group com.apple.loginwindow.netaccounts. After running this I can see the desired groups added to the list in Sys Prefs -> Users & Groups -> Login Options -> Options. However, membership of this group is deemed irrelevant by the fact the radio button above this list for 'Allow these users to log in at login window' is still set to 'All network users' and not 'Only these network users'.
    Does anyone know of a way to enable the 'Only these network users' option via the Terminal/a shell script?
    Thanks,
    Chris

    I tried that, thinking it was exactly what I wanted, but it still sends stuff as SMS (green bubble).

  • Network Users - Can't login without home folder

    Hey everyone,
    Got a problem. We upgraded our lab from 10.6.8 to 10.9.3. Preserving our settings and bootcamp by simply upgrading. After getting nearly all machines sorted out with active directory we are still having a problem with 2-3 machines with network user accounts being able to login. If no local home folder has been created prior to upgrading to 10.9.3 then the user cannot login, the login prompt dissapears then re-appears. Any way to fix this?
    Here is a run down of the set-up.
    Our settings force network users to have a local home folder on the local mac that they are logging into.
    Mac OS X server is 10.6.8.
    Active directory server is 2012 R2.
    Network users without a pre-created home folder on the local mac prior to upgrade cannot login. The login prompt dissapears, then re-appears. No login.
    Computers are managed with workgroup manager, as well as apple remote desktop. But no settings are applied, and no login scripts are being run.
    Also I have noticed something concerning Mac OS X 10.8.5 and up. And that is in the active directory settings, if you bind to a domain (using active directory and not LDAP), lets say for example:
    mydistrict.maindistrict.net
    And you go to add your local active directory district to the Authentication/Contacts search policy eg: Active Directory/mydistrict.maindistrict.net
    it will only show: Active Directory/mydistrict/alldomains.maindistrict.net.
    It shows a list of all domains for the forest. But it also adds the district that you bound to as the search directory?
    Let me use a precise example using actual names.
    Bind to local district: pineville.ketsds.net
    Now in search policy on 10.8.5 up to 10.9.3 it displays possible search domains like this:
    Active Directory/PINEVILLE/pineville.ketsds.net <- The domain we want.
    Active Directory/PINEVILLE/all-other-domains-in-forest.ketsds.net <--Which is fine.
    Which is all fine, but when we select  the local domain for authentication, and contacts search it adds it, but in the overview it says that it is not in our search policy even though it is.
    On Mac OS X versions below this (10.6.8 and down, cannot verify for 10.7 as we do not have systems with it) it displays the search domains as:
    Active Directory/pineville.ketsds.net
    as compared to  this on 10.8.5 and above:
    Active Directory/PINEVILLE/pineville.ketsds.net
    as well as all the other domains, and when you add the local to the search policy it does not give the error that it is not in your search policy. Is there anyway to make this happen on 10.8.5 and above? We have tried everything. Network accounts will login even though it says this, it is just annoying.
    Last question is on one computer that we upgraded, we had a problem with the network accounts. Tried deleting the .plist for network preferences, and the Directory services folder as well as the Open directory folder and now it create the open directory folder as locked and any changes made with the directory utility in the search policy is immediatley reverted once we hit apply.
    Summary of questions:
    1.) Network users cannot login without local folder created prior to upgrade.
    2.) Mac OS X 10.8.5 and above does not correctly add Authentication/Contact search policy domains as it does in 10.6.8 and below.
    3.) Active Directory/Open Directory Authentication/Contact search policy settings keey reverting after applying. (Happened prior to deleting .plist files and AD/OD folders in /Library/Preferences)
    Thanks guys, sorry if thi post is so long! :/

    -BUMP
    Not sure what the bump policy is but my post is fadiing fast. Third page already.
    Kind of an urgent situation guys, any help or insight at all would be greatly appreciated!!

  • A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before?

    A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before? It has happen twice. Two different teachers in two different classrooms entering the correct user name and passwords and computer won't allow them to login. Then they try in different computers in same classroom and have no problem login.

    Yes. I can login with a test user. And any other network user can login as well to this particular mac. Actually the mac has bootcamp and boots into either mac or windows. The same user entering the same login username and password can login into the windows side, but not the mac side.
    I had this same issue last semester in another classroom, another mac and a different teacher. This summer I reformatted and imaged that mac and I asked that teacher to login today to that reimagened mac and she had no problem today doing so.

  • Unable to login network user from login windom. SSH login ok.

    I have a MacOS 10.6 client and ldap network users server by MacOS 10.4 Server. Trying to login via the login window I get "Logging in..." which tries forever (or until I reboot).
    * SSH login works fine with network users.
    * Local users can login.
    * Network access is allowed by all users (Preferences->Login)
    * Removing ~/Library/ from the network user doesn't work.
    Logging in via SSH while the login screen is hanging I get:
    [mikael@melba ~]$ ps -Umikael
    PID TTY TIME CMD
    330 ?? 0:00.03 /sbin/launchd
    480 ?? 0:00.02 /System/Library/CoreServices/CCacheServer.app/Contents
    693 ?? 0:00.00 /usr/sbin/sshd -i
    694 ttys000 0:00.12 -bash
    730 ttys000 0:00.00 ps -Umikael
    Any ideas?

    I cannot create the mobile account (real username replaced here with '<username>'). This is true whether I run the command as root or as the user in question (via ssh):
    root# /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobilea ccount -n <username>
    createmobileaccount built Jul 23 2009 22:14:42
    2009-10-05 15:54:41.906 createmobileaccount[41973:903] MCXCCacheMCXRecordAndGraph(): [localNode createRecordWithRecordType:(null) name:"<username>"] == 4100 (Unable to create record <username> in /Local/Default.)
    2009-10-05 15:54:41.908 createmobileaccount[41973:903] MCXCCreateMobileAccount(): Failed to create account. Error = 4100 (MCXCCacheMCXRecordAndGraph failed). Cleaning up mobile account record.
    2009-10-05 15:54:41.909 createmobileaccount[41973:903] MCXCDeleteAccount(): Trying to delete user id = 0
    * mobile account could not be created: 4100 (Unable to create record <username> in /Local/Default.)
    Directory services and DNS are set manually.
    Message was edited by: BerkeleyAstroBill

Maybe you are looking for