Unable to use LAPS about macoslaps HOT 7 CLOSED

So what that looks like is your computer record does not have write access in Active Directory. Could you verify that the computer record can change things about itself in Active Directory?

from macoslaps.

@kadeemcallum were you able to write the password to Active Directory after changing the computer attribute so it can write to itself in AD?

from macoslaps.

Hi,
I am experiencing the same issue kadeemcallum.

Warning|Thu Feb 15, 2018 09:06:35 am|macOSLAPS|There has never been a random password generated for this device. Setting a default expiration date of 01/01/2001 in Active Directory to force a password change...
Info|Thu Feb 15, 2018 09:06:35 am|macOSLAPS|Password Change is required as the LAPS password for admin has expired

The Mac is running macOS 10.13.3 and is bound to 2012 R2 Windows Domain. The mac computer object is within the same OU as Windows 10 computers which have LAPS working, so the SELF permission is set correctly to write to the ms-Mcs-AdmPwd value.

I have macOSLAPS version 1.0.3 installed and attached is my .plist file.
edu.psu.macoslaps.txt

Any ideas?

Thanks.

from macoslaps.

@paulgab is your admin account actually called admin?

from macoslaps.

from macoslaps.

Thanks, the machine was changed added to AD and it was fixed

from macoslaps.

@kadeemcallum did you just unbind and re-bind the same computer and then it started to work?

from macoslaps.