mac - Authentication is disabled

** This happens in the M series chips only for macs

A user can't use certain features of the mac like Touch ID, iCloud, etc.

If you get the message Authentication is disabled

**Make sure the Mac is connected to Trusted_01 network

If you have already added the computer to the domain and configured option to create mobile account at login, close Directory Utility and go back to Users & Groups in System Preferences and continue to next step.

1) Select the local user account that you want to delete to and choose Delete (-).

At the Delete prompt, select option to 'Don't change the home folder (the home folder remains in the user folder). This will rename the user folder by adding '(Deleted)' at the end of the folder. Click 'Delete User'

2) Rename the old user folder without the word (Deleted) in it. Go the user folder and delete the '(Deleted)' and any spaces from the folder name. The name of the user folder needs to match the AD username.

a  Enter local admin credentials to make the change

b  Restart the PC and login as the user with the same credentials

c  All the data should have been saved

d  Go to the User and Groups in the System Settings

e  Click on the info button of the user

f   There should be an option to convert to mobile and press the slider to convert to mobile enter admin credentials and the mac will reboot

g  Enter the user’s credentials then enter their AD password then enter a local admin account then the account should be mobile again