Macbook bound to AD won't allow network login or new local account creation

Question

As the title states I am having an issue related to a macbook pro that is bound to active directory. The only option we tweak when binding the macs to AD is that we opt to "create mobile account" option under directory utility.
It also seems that while we can login through the local admin account, new local accounts cannot be created (the account creation window hangs when you create account).
Any help would be appreciated

Answer 1

Hi
To successfully bind a mac workstation to Active Directory certain things need to be in place:
DNS has to be fully resolving on both pointers. This is done on the PDC or whatever server is the designated DNS Server.
Date and Time settings need to be adjusted to reflect whatever is designated as the NTP Server in the AD environment. Adjust the Date & Time Preferences Pane and find out from the Windows Network Administrator what the NTP Server IP address is.
You must use account credentials that has authority for the AD Domain. If you're trying to use your own account it may be restricted in what it can do? A domain account has special privileges not usually accorded to ordinary user accounts.
This assumes you're (a) not the Active Directory Network Administrator and (b) you're using the Active Directory plug-in the login options section of the Accounts Preferences Pane. It's a good idea to click the "Open Directory Utility" button when binding to Active Directory. It's also a good idea to access the Advanced Section once the Utility has opened.
If this is failing at the bind stage then perhaps you should review the details you've been given when binding to AD? It may be worthwhile to clear the workstation from the Computer OU before you try again?
The above is not an exhaustive list but should help?
Tony