Permisson problem: Change UID of domain account

Hi everyone,
I'm not sure if this is the right place to ask since I'm new to this forum but I kind of run out of options.
My company just bought an iMac and it's my job to integrate it into our domain and active directory. I've managed to do this successfully. I can now log on to the machine with my company domain account.
Each user has a personal home drive (NFS drive) which is (in Windows) mounted at startup. The user logged in has only access to his/her home directory (permissions are set through the UID).
I managed to mount it on the Mac too.
BUT:
There seems to be a permission problem due to false UID's.
Within the domain, my UID is 1258. When I log on to the Mac, it is 142783090.
Does anyone now how I can change this? I've been searching for a solution all morning but couldn't find anything helpful. I already tried to change the UID in SysPrefs -> Account -> right-click on the account but it doesn't work for accounts that are not local ones. I also couldn't find out where the Mac gets this strage UID from...
Thanks in advance for your help!
Cheers
PS: If you need more information from me, please ask, I will deliver it gladly =)

I'm sorry, you're right, the page hold the solution but I was trying to find out how much I can do on the Mac without installing any additional software.
Thanks anyway for your help!
Cheers!

Similar Messages

Windows 8 Problems changing an AD domain password

Hi i have a problem with Windows 8 computers changing passwords on a Domain.
I have several Windows 8 clients that when their passwords have expired they are unable to change them and i am having to reset them on a domain controller.
If users change their passwords before they expire by either using control-alt-del or clicking the notification bubble then it works fine and they can change their passwords without a problem.
We have a Domain with a mixture of 2003 and 2008 domain controllers running at 2003 domain functional level
However, if they leave it until their passwords expire and try to log in they are prompted as expected to change their passwords so they click yes and they enter the info:
Old Password
New Password
Confirm New Password
They then get an error your password has expired and this error repeats in a circle until i change their passwords on a DC. This behavior also occurs if i check teh box for 'User must change their password at next log on'
This as far as i can see is affecting all Windows 8 users, all Windows 7 users are working fine and everything works as expected. From what i can make out its a problem with authentication as you are able to change t he password once the computer
has logged in using a valid password.
Any ideas?
Thanks.

I am getting the same issue. If you found how to fix it can you share please?

Moving preferences from local to domain account

I've been given the task of adding a handful of Macs to an AD domain. So far I've added 2 with no issues.
My problem is this: all of the Macs have been in use for months or more and have local accounts on them. I'm looking for a way to bring my users application, browser, and OS preferences from the local accounts of my users into their new domain accounts using the least administrative effort. I'm assuming that this will be as simple as copying parts of the users library over, but am unsure if this is the best way to go about it or what specific folders need to be copied.
I was also asked (and I think the answer to this is no) whether or not a local account can simply be changed into a domain account.
Models are MacBook Pros, iMacs, and I believe 1 Macbook Air. All are Intel. If there is any more info that I can provide let me know.
Any help or advice would be greatly appreciated.

You can delete the AD profile, rename the local profile as the AD profile, then change the owner of the profile to the AD account. From the command line it'd go something like this:
sudo rm -R /Users/<AD_username>/
sudo mv /Users/<local_username>/ /Users/<AD_username>
sudo chown -R <AD_username> /Users/<AD_username>
Make sure, of course, there is nothing in the original AD profile you wish to keep before removing it.
leslie

Transfering local account preferences to domain accounts

I've been given the task of adding a handful of Macs to an AD domain. So far I've added 2 with no issues.
My problem is this: all of the Macs have been in use for months or more and have local accounts on them. I'm looking for a way to bring my users application, browser, and OS preferences from the local accounts of my users into their new domain accounts using the least administrative effort. I'm assuming that this will be as simple as copying parts of the users library over, but am unsure if this is the best way to go about it or what specific folders need to be copied.
I was also asked (and I think the answer to this is no) whether or not a local account can simply be changed into a domain account.
Models are MacBook Pros, iMacs, and I believe 1 Macbook Air. All are Intel. If there is any more info that I can provide let me know.
Any help or advice would be greatly appreciated.

Hi,
Thanks for your posting.
Only the Laptop 1 have this issue?
Check this thread:
http://social.technet.microsoft.com/Forums/windows/en-US/5a27b553-0c33-4de6-8219-6356645e6b7e/windows-7-change-local-profile-to-domain-profile-instantly?forum=w7itprogeneral
For the Windows Server 2012 Essentials, i think you may ask in:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserveressentials
Regards.
Vivian Wang

Can no longer change the G/L account in AO90

Hi!
I have a problem changing the G/L account in AO90 for an account determination where I have posted the wrong account. Since I have already created assets with an account determination that includes this account, it says that I "can no longer change the value '124000' for the G/L account.
I have found some threads with info f.ex:
- AC476 in transaction OBMSG, but it require SAP entry
- reverse the posting values in transaction ABF1, but I'm not 100% sure how to reverse it...
How can I remove the asset/reverse asset values so it will be possible for me to post the correct account? I'm currently working in a dev system, so these are fictive assets that I can delete (which I cannot do as there are values on them). But i have to get this in order to transport the correct properties to the test system.
All help much appreciated!
Regards
Haakon Bekkestad

Its Very Simple.
To change GL Account for asset class first remove GL Account in A090 i.e.
put it as blank and save it.
Come out from AO90 transaction code and change gl account.
It will posted.

Problems setting a Yosemite domain name account for Send only

What do I do in Yosemite Mail so that my DOT MAC account is IMAP, but so that I can also send email from a domain account that is a POP account at GoDaddy?
My Dot Mac / iCloud account is my primary Mail account. I also have a domain name account that I use only for sending mail. The domain name account is a POP account, not an IMAP account. The domain server (not an Apple server) forwards the email to my Dot Mac account as it comes in, but I do NOT sync mail or even pick up mail from the domain name server.
With Yosemite, Apple apparently changed the way it deals with that situation. I say "apparently" because I'm having a hard time getting help on this. Before Yosemite, I had the domain account enabled, but while there was a password for sending there was no password for picking up the domain name mail. Every once in the while over the years that setup would get flaky (as Apple made changes on its end?) but usually it worked.
I continued that setup with Yosemite, but a few months ago I started having problems. My mail worked as normally, but during the night or the morning, many messages would arrive as unread duplicates, and many emails I didn't want deleted were permanently deleted. Oddly, in addition, I had an easy time keeping the setup on my MacAir but I had a hard time keeping it on my Mac Mini, even though both have Yosemite.
I took my MacAir to an Apple genius who said the settings had changed in Yosemite. He somehow reset the account for Send Only by clicking a box. Everything worked fine for a week or so,* But then I could no longer send domain name mail, I couldn't find the setting, and I went to another Genius, who didn't know what I was talking about and who couldn't solve the problem.
I need to be able to send my domain name account without making it an IMAP account, but can't figure out how.
thanks
* In other words, the Dot Mac IMAP worked correctly, the POP messages forwarded correctly to DOT MAC (without any duplication problems), and I was able to send mail from the domain account.

I've not tested it but if you simply leave the incoming mail server field in the Mail account preferences blank for that account blank but set up the outgoing server and do not check "include when automatically checking new mail" you should be able to send but not receive
OR undo the forward that you have set up from #2 to #1 and use both normally
LN

HT2500 Hi, I have a problem with my mac mail account. Its linked with my website and i've just transferred my domain and host plan to 123-reg.co.uk Now for some reason emails disappear from my inbox! Emails come in and then my inbox is empty.. Help!

Hi, I have a problem with my mac mail account. Its linked with my website and i've just transferred my domain and host plan to 123-reg.co.uk Now for some reason emails disappear from my inbox! Emails come in and then my inbox is empty.. Help!

Lord K. Thank you. Yes I am within the 90 time period, however I travel Intertionally and I can not receive not make a call to Apple. I was just at the Genius Bar in Chicago and they said, don't worry about it. It just floats out there, however, I can not recover my messages on a flash drive. I need to go back to my old computer which I don't have with me. My messages were in folders for a lawsuit. It is going to take an incredible amount of work for me to, you have no Idea. We are talking thousands of pages! I the defendent will have them during discovery so I am not so worried. However, I can not bring them to him on a Flashdrive when I meet with him without an extraordinary amount of presssure on my part. THis is not just some little email issue. This is suing EXPEDIA and Tripadviosr.com

I have got both a workgroup & domain user accounts and wish to change this to one account (Win XP)

To All,
I know that this sounds a little daft. When I joined my two Win XP clients onto my 2003 Server Domain and since after this I have encountered "multiple" user accounts bearing the same name.
My clients are "REB2 & REB3" and when I logged into both of these as my Domain I have encountered "separate" accounts for the same User Name in mt Active Directory.
I know you can have a single User account bearing the same User Name (As I wish to use both clients as Hotdesks).
I would be grateful for any assistance in regards to this.
Regards,
Bob.
Robert Brindle MCP, MCSA & MCSE.

Hi,
Based on my experience, it is not possible to create two accounts with the same name in a domain.
In addition, workgroup accounts and domain accounts are different and they have no influences to each other generally. In a workgroup, no computer has
control over another computer and all PCs must be on the same local network or subnet. Besides, to log on to any PC in the workgroup, you must have an account on that PC. However, in a domain, it usually has DCs and the domain members can be on different
local networks. If you have a user account in the domain, you can log on to any PC on the domain without needing an account on that PC.
If I misunderstood anything, please feel free to let me know. I would appreciate it if you can describe it more clearly.
Best regards,
Susie

Yoga 2 Pro - Veriface doesnt work with Domain Account

I have a Yoga 2 Pro and I can get Veirface to work fine with a local account but it will not work with a Domain Account. I can get it to where it prompts me for the Domain Account Password (as it should the 1st time) but when you enetr the proper password, it tells you ints invalid etc. I have tried changing the Domain Password but it acts like it just cant locate the account etc. Does anyone know if this is a known issue or if there is a resolution to this?
I am using Veriface 5.0.13.5261 on a Windows 8.1 Pro Operating System

Hi there, i had the same problem.
I have two accounts
1. valentia\mubi (which is domain account)
2. Mubi (which is local laptop account)
When i use register my account with veriface, it work fine with Mubi
When i use to register my account with valentia\mubi it say wrong password..
I even deleted local i.e. Mubi account but still no luck!
This is great feature, but pretty much useless if not working with domain. I have to use domain account,

What would be the impact of changing Enterprise and Domain admin password

Hello,
I'm planning to change the Enterprise/Domain Admin's password for some security reasons. I do not know what all will fail, what are all the process is going to be impacted. Actually I don't want to see the bigger impact after changing
the password.
I've gone thru' few articles but it's in Powershell where I have the limited knowledge & can't customize the script.
Is there a tool or a way to scan the LAN/Servers and get a clear output where these users accounts (Domain & Enterprise Admin) being used, especially windows services wise, and all other dependencies?
Can anybody help?
Regards,
MSK

Hello
As far as I have experienced by changing the enterprise admin password there will be no impact on the environment, not event on
Services.msc console. But resetting an account is a different story. If you change the user account, services which relies on the user will be updated automatically but by resetting the password you have to manually enter the password on each
service.
Also I am thinking about if you use remote desktop with saved credentials to connect to DC's as enterprise admin, you may experience account lockout problems. So wise move is to create another account as member of enterprise admins group and keep it safe
with a strong password and save it for a rainy day. In that case if the original enterprise admin locked out due to incorrect logons you have a gold key to overcome the situation.
Regards.
Mahdi Tehrani Loves Powershell
Please kindly click on Propose As Answer or to mark this post as
and helpfull to other poeple.

Change uid and home directory locations? - no more netinfo manager?

greetings,
just setting up my new MBpro with 10.5... i've discovered netinfo manager is no longer here... searched the discussion forum and have learned a little. i looked into the "directory utility", but don't see how to use it for configuring local user info... (seems to be primarily focused on network services, such as ldap)...
i keep 2 accounts on my computer - personal account for home use and work account for when i need to use my laptop for work. for my work account i need to set my UID to match that of our servers (suns)... i nfs mount suns, and access servers, etc. without the same UID, i don't have access to my network files when locally mounted... also i keep my home directories on a second partition and need to change the location of the home directory... all of these were relatively straight forward in netinfo manager.... but i have no idea where to access the configuration info that was in netinfo manager...
is there some kind of additional software i have to install?
i'd appreciate any suggestions-
thanks-

great! thanks!!
ps - besides the fact that i can get my own unique environments and keep my work life separate from my personal live on my home computer by making separate accounts, the 2nd account always gives me a way to test things and change things for an account without being logged into it... even if i didn't want to make a user account for my job on my personal computer, i'd still keep an alternate account for testing things and as a backdoor to fix problem in my primary account... i've always loved unix since i first started using it in 85... an i'm SO glad that apple made the switch to unix, albeit a little later than was good for them. i think it is undeniably better for the users, the administrators, and even apple... the mac is quite a joy to use these days, IMHO... (-;

Domain\account logon error in run a command line sequence

Hi,
we have some strange authentication problems, deploying computers with SCCM 2012,
we have sometimes the following error:
The task sequence execution engine failed executing the action (Add to Dept collection) in the group (****) with the error code 2147943726 Action output: [ smsswd.exe ] PackageID = 'CDT00032' BaseVar = ''; ContinueOnError='' ProgramName = 'cscript.exe
AddComputerToCollection.vbs /CollectionID:****** /ComputerName:******' SwdAction = '0001' ::LogonUser(sUserAccountName; sUserDomainName; sUserPassword; LOGON32_LOGON_INTERACTIVE; LOGON32_PROVIDER_DEFAULT; &hUserToken); HRESULT=8007052e (e:\nts_sccm_release\sms\client\osdeployment\installsoftware\runcommandline.cpp;324)
cmd.Execute(pszPkgID; sProgramName; dwCmdLineExitCode); HRESULT=8007052e (e:\nts_sccm_release\sms\client\osdeployment\installsoftware\main.cpp;372) LogonUser failed with the error 0x8007052e Install Software failed to run command line; hr=0x8007052e. The operating
system reported error 2147943726: Logon failure: unknown user name or bad passwd.
The user is correctly Set. , password works (because sometimes sequence is ok)
No errors before executing.
Computer is correctly registered in AD.

no,
the domain account is not under policies.
but the vbs is connecting sur SCCM server to add the computer account in specific collection.
The domain accoutn is SMSADMIN also.
i modify my script and TS.:
script is now logging actions.
in TS i Add a network drive connexion to SCCM server with same account.
in TS a change COM3 registry key to 0x100000 as i saw in other pages.
JEFFDEG

Local Account Migrated to Domain Account Issue

I used the Windows Server 2012 Connector tool to migrate a local profile to a domain account on a WS2012E Server. The problem is, when the user logs in to the laptop, we will call Laptop1 using his domain account we will call DomainUser1, Laptop1 is
still using the folder for his old local account (we will call LocalUser1). Laptop1 was the machine used to migrate the local account to domain account. When DomainUser1 logs in to another terminal, we will call Desktop1, it takes a long time to
login. After this initial long login time, he can then log in to other terminals that are NOT the Laptop1 machine with normal login speed. As soon as he goes to login to Laptop1, it takes forever again.
My theory is that Laptop1 is using a different SID for his domain/local account, which is causing the slow login speed, as windows has to update permissions for all his files. This is a very confusing scenario to explain, so I hope you all are following
me.
To recap:
DomainUser1 logs in to Laptop1 - the local profile uses folder C:\Users\LocalUser1
If DomainUser1 logs in to any other terminal - the local profile for that computer uses folder C:\Users\DomainUser1
My theory is that this difference is causing slow login times. No other users on the domain are having login issues other than those users that had their profiles from their personal computers migrated to the domain accounts. All other domain
users that had their files migrated using the tool are having similar slow login times, when access their personal computers and then switching to other terminals.
How do I go about changing the local profile on Laptop1, when logged in as DomainUser1 to use folder C:\Users\DomainUser1 rather than C:\Users\LocalUser1?

Hi,
Thanks for your posting.
Only the Laptop 1 have this issue?
Check this thread:
http://social.technet.microsoft.com/Forums/windows/en-US/5a27b553-0c33-4de6-8219-6356645e6b7e/windows-7-change-local-profile-to-domain-profile-instantly?forum=w7itprogeneral
For the Windows Server 2012 Essentials, i think you may ask in:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserveressentials
Regards.
Vivian Wang

Changing my Apple ID Account query

I have an apple ID that is not in the form of an e-mail address. For example: abcdefghijk99. I've had it for years, going back to when I was a Windows PC user (until I saw the light 2 years ago and switched to Apple products) for itunes purchases initially. As far as I was concerned my appleid was fine and I've used it to purchase more music and apps for my Mac, iphone, ipad and ipod since. Then I discovered a problem. Having downloaded the Find My iphone app it prompted me for an appleid in the form of an e-mail address and would not accept my original appleid. Likewise the same issue applied to the the same for finding the ipad.
So I checked it out online a little to try and see if it is possible to change your applid and found the "My Apple ID" section at https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/ and that under the "Manage my account" section you can make changes to your appleid account. But changing your name to an e-mail address is not one of them, at least if it is to the e-mail address that is your default e-mail address as held by itunes.
So ok, and I imagine others would suggest this, that I could set up another ID as an e-mail address and use this for the Find my iphone and ipad facilities.
But looking forward, it doesn't solve the problem at all.
1. I've built up a fair history of purchases using itunes and from the App store under my original non e-mail address and I don't want to lose them. And of course future updates to software that I've purchased from the App Store would be against my original appleid and I don't want to lose that thread.
With the advent of "iCloud" I understand that it will want you to enter your Appleid in order to upload to, sync your devices with etc., If it wants this to be entered in e-mail address format then it will not be accessible to me.
2. Appleid software is inconsistent in that for iTunes and The App Store it will allow the ID to be entered both as a non E-Mail address and as an E-Mail address. But for the Find my iphone App, will only accept an E-Mail format address as the Appleid. I think this is perhaps a legacy of MobileMe, which possibly The iCloud is going to use the MobileMe format as an Appleid. And if so that will have implications for other users who have the same type of appleid as me.
3. All I want to do is simply change my Appleid to my default E-Mail address, but it won't let me. I raised this issue on the telephone with Apple who understood my issue, did not immediately know the answer, but said would discuss with colleagues and E-Mail me back. The reply was:
"I talked about your case with my colleagues. The only suggestion that came to mind is that you consult iTunes via email and ask if they can amend the ID or if it would be possible to transfer you purchases from one account to another account."
Ok. So it led me to here, the Support area, because it seems impossible to be able to raise the issue by E-Mail with them, as much as I've tried to by going from page to page trying to find out "how to contact them".
So does anyone here have any good ideas as to how I solve my problem? Additionally is there anyone from Apple itself who monitors questions raised in this community? If so could they let me know that they appreciate my problem and how/if it can be dealt with?
Hoping someone comes up with a solution and looking forward to hearing from anyone with suggestions.

Solved with assistance from iTunes support. The main problem was that you cannot use an e-mail address which is associated with your existing account. So the answer is to set set up a new e-mail address with your Internet Service provider. Next step is to log into iTunes using your existing appleID (which in my case was a non e-mail address as mentioned in my question) and then modify your itunes id and e-mail account, both to the new e-mail address. I tried it and it worked. All downloaded history such as itunes music and apps that I have downloaded onto my devices over time has been retained. Furthermore I can now use the "Find my iPhone app" to find both my iphone and iPad. Likewise will be able to use this revised appleid to access iCloud once available and synch my apps etc., Very pleased with iTunes Support's prompt response and remedy.

My apple ID and password, recognized through out the Cloud, is not being recognized in the itunes store. I am signed into itunes.When I want to change something in my account, the sign in prompt comes up and doesn't recognize my PW

My apple ID and password, recognized through out the Cloud, is not being recognized in the itunes store. I am signed into itunes.When I want to change something in my account, the sign in prompt comes up and doesn't recognize my PW

Solved the problem. I had to allow cookies for safari and it run - as here: Re: itunes keeps asking for my apple id password. it's NOT entered incorrectly.

Permisson problem: Change UID of domain account

Similar Messages

Maybe you are looking for