Applies to: Centrify DirectControl on Mac OS X 10.6 and lower
No AD accounts are able to login to a Mac, only local accounts can login.
The user is correctly configured and adquery shows that the account is Zone-Enabled and authorised for login.
However the user still shakes at the login box. Why does this happen?
This can happen if "Allow Network users to log in at login window" is unchecked and disabled:
System Preferences > Users & Groups > Login Options
Once enabled, all users should be able to login.
The following configuration parameter can configure this setting:
By default, this parameter is set to: true
When this is set - even if a user deselects the checkbox, it will be re-enabled when the machine is restarted (Effectively preventing a user from deactivating network login).
Note: This parameter will only work on OS X 10.6 and lower, for OS X 10.7 and higher, please use the following KB instead:
For other types of possible login issues, please see the following KB: