Reactivating users via pwpolicy gives error "User does not have a shadowhash account"

Question

Hi All,
I've got a OS X (10.8) server running Open Directory and File Sharing. We deal with a lot of free lance people so accounts are often being deactivated and reactived.
A user is first created by submitting to an internal form that starts an applescript that creates the user account, password, and sets a hardExpireDateGMT that disables the account on the individual's out date. It also adds them to specific file sharing groups etc. This works perfectly for us.
Our problem stems from when we "re-hire" people. Again an internal form is used to start an applescript. This script searchs the OD for the user to make sure they actually have been in the system. If it finds the user it sets a new temp passoword, updates any contact info, and then uses "pwpolicy -enableuser" to reenable the user. Our error occurs at the last step during the "enableuser". We get the error "User <username> does not have a shadowhash account>"> However, we can manually enable the user through Workgroup Manager.
Is there a way to create the shadowhash account via the command line? Or is there a better way then pwpolicy to reenable the user?
Thanks!

Answer 1

Hi,
Here are a few Microsoft articles that provide the suggestions to troubleshoot this issue below:
Error: The security database on the server does not have a computer account for this workstation trust relationship
http://technet.microsoft.com/en-us/library/ee849847(WS.10).aspx
Domain Controller does not allow interactive logon, shows error “The security database on the server does not have a computer account for this
workstation trust relationship"
http://support.microsoft.com/kb/2015518
But if you cannot log onto the Windows Small Business Server with administrator permissions, it is hard for us to troubleshoot this issue. You may need
to restore the system from backup. For the detailed steps, you may refer to the following Microsoft TechNet article:
Recover the Operating System or the Full Server
http://technet.microsoft.com/en-us/library/cc794282(v=WS.10).aspx
Regards,
Arthur Li
 TechNet Subscriber Support 
in forum
If you have any feedback on our support, please contact
[email protected] . 
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.