In setting up a laptop, I overlooked checking the “create mobile account at logon” option in the Active Directory configuration. The result is that the user can only authenticate to her account on this machine while connected to the LAN.
There must be a way to enable the account to be mobile to correct this error. How do I do that?
Turns out I misunderstood the problem. No network accounts could authenticate on the machine, only the mobile account could. That was due to time synch problem. Sync the local machine and AD, and everything works.
Comments are closed