Change password for file sharing mac update#

The AD password change system changed in 10.7 with the addition of FileVault 2.

You would then be promoted to Update or create a new Login Keychain. If you changed your password outside the Mac (Web Portal etc.) the system would receive the password change the next time you connected the Mac to the network and logged in. The password would then change at the local offline level of your Mac. If you passed the requirements the password would be immediately changed in Active Directory. If you changed your password on the Mac it would first check if any password requirements are set at the domain level. When the time comes to change your AD password you could change it on a 2nd Mac, a Windows device or even a Web Portal. If you then disconnect the Mac from the network you can still log and continue to work. Once you log in, the system caches your AD account to the local directory. You can now log in with any Active Directory user and access to Global Groups, Kerberos and Directory Contacts. To get Mobile Accounts to work you first have to bind the Mac to Active Directory, once bound the Mac is now trusted.

If your company or school uses Active Directory, you most likely use Mobile Accounts. In the end, I will explain the current problems we are having with Active Directory Mobile Account password syncing and how Apple fixed the issue. I will also go into some history behind the built-in AD Connector. Before we get started I’m am going to talk a little bit about how macOS and Active Directory work together.

Change password for file sharing mac update#