KB-4439: How to convert a migrated account into a network account after unlinking from the Account Migration Tool on Mac OS X

Home >

KB-4439: How to convert a migrated account into a network account after unlinking from the Account Migration Tool on Mac OS X

Product:

Centrify Identity Service, Mac Edition ,

Published:

12 April,16 at 11:22 AM

Rating:

Applies to: Centrify DirectControl on Mac OS X 10.6 and higher

Question:

How can I unlink a migrated local account and convert it into a network account?

Answer:

Log into the Mac as a Local Admin.
For migrated accounts that were created on Centrify for Mac agent versions 5.2.1 and below:
- Go to System Preferences > Centrify > Account Migration > Select the target user > Unlink
- There will be a pop up saying that the user will need to create a local account with the same name to access this home directory. Click OK.
- Notes:
  - Migrated accounts that were created on versions 5.2.2 and higher are migrated differently and don't need to be manually unlinked from this menu.
  - Accounts that have been converted to Mobile Accounts will need to have their local user records deleted manually from System Preferences > User & Groups > (Make sure to use "Don't change the home folder" option):
  - Alternatively, the following command could also be used to only delete the local user record (without affecting the local home folder):
    - sudo dscl . -delete /Users/local_username
Flush the AD cache:
- sudo adflush
View the contents of the /Users directory:
- ls -ln /Users/
If the home directory folder name does not match the AD username, rename the folder so that it matches the username of the target account.
- Open the Terminal and enter the following commands:
  - sudo mv /Users/old_username /Users/ad_username
- (Where ad_username is the username of the AD user)
Change the ownership of the user's home directory.
- sudo chown -R ad_username /Users/ad_username
Use adquery to view the UID for ad_username.
- adquery user -u ad_username
List the contents of /Users and make sure that the change of ownership actually took.
- ls -ln /Users
Log in as the AD user.
If needed, choose to Update Keychain Password.
Test if the account can access the home folder and open files.