{"id":455,"date":"2015-01-29T01:48:57","date_gmt":"2015-01-29T01:48:57","guid":{"rendered":"https:\/\/digitalchild.info\/?p=455"},"modified":"2015-01-29T01:48:57","modified_gmt":"2015-01-29T01:48:57","slug":"os-x-mobile-account-admin-off-network-fix","status":"publish","type":"post","link":"https:\/\/randomadult.local\/os-x-mobile-account-admin-off-network-fix\/","title":{"rendered":"OS X Mobile Account Admin Off Network Fix"},"content":{"rendered":"
I came across an issue with one of my mobile users that was unable to get admin access off network. As soon as they connected to the corporate network their admin rights would return. I did a bit of searching and found this post on the Centrify forums<\/a>\u00a0about\u00a0the issue. \u00a0Turns out that it has something to do with the AD cache\u00a0not matching up the domain group with the local admins. This command will force add the user to the local admin account instead.\u00a0The following os x mobile account off network fix should do the trick.<\/p>\n I decided to give the command line suggestion a go and it worked a charm.<\/p>\n I connected the machine to the corporate network, used one of my domain admin accounts to run the CLI and substituted the username.\u00a0I tested this by disconnecting the laptop from the network and the user keeps their admin credentials.<\/p>\n","protected":false},"excerpt":{"rendered":" I came across an issue with one of my mobile users that was unable to get admin access off network. As soon as they connected to the corporate network their admin rights would return. I did a bit of searching and found this post on the Centrify forums\u00a0about\u00a0the issue. \u00a0Turns …<\/p>\n\n\nsudo dseditgroup -o edit -a\u00a0[username]\u00a0-t user admin\n\n<\/pre>\n