Applies to: Centrify DirectControl on Mac OS X 10.6 and higher
Question:
How can I unlink a migrated local account and convert it into a network account?
Answer:
Log into the Mac as a Local Admin.
For migrated accounts that were created on Centrify for Mac agent versions 5.2.1 and below:
Go to System Preferences > Centrify > Account Migration > Select the target user > Unlink
There will be a pop up saying that the user will need to create a local account with the same name to access this home directory. Click OK.
Notes:
Migrated accounts that were created on versions 5.2.2 and higher are migrated differently and don't need to be manually unlinked from this menu.
Accounts that have been converted to Mobile Accounts will need to have their local user records deleted manually from System Preferences > User & Groups > (Make sure to use "Don't change the home folder" option):
Alternatively, the following command could also be used to only delete the local user record (without affecting the local home folder):
sudo dscl . -delete /Users/local_username
Flush the AD cache:
sudo adflush
View the contents of the /Users directory:
ls -ln /Users/
If the home directory folder name does not match the AD username, rename the folder so that it matches the username of the target account.
Open the Terminal and enter the following commands:
sudo mv /Users/old_username /Users/ad_username
(Where ad_username is the username of the AD user)
Change the ownership of the user's home directory.
sudo chown -R ad_username /Users/ad_username
Use adquery to view the UID for ad_username.
adquery user -u ad_username
List the contents of /Users and make sure that the change of ownership actually took.
ls -ln /Users
Log in as the AD user.
If needed, choose to Update Keychain Password.
Test if the account can access the home folder and open files.