FAQ: Changes to Employee-Assigned Macs and Password Procedures

Previously, when passwords were changed outside of Enterprise Connect on a GVSU managed-Mac, it caused issues with macOS services like FileVault, Keychain and network/Mac password synchronization.

The first of upcoming changes to GVSU employee-assigned Macs will improve password change reminders, use of FileVault disk encryption and your ability to sync passwords. It will also provide a simpler resolution should you completely forget your password.

Frequently Asked Questions

Do I need to do anything for these changes?

No. These changes will happen in the background and do not require your interaction.

What’s the best way to change my password if I have a GVSU Mac?

Even with these changes, the best way to change your password will still be to use the Enterprise Connect application on your Mac:

  • You will need to be connected to the GVSU network on-campus, or remotely through our the Ivanti Secure Access VPN (formerly called, "Pulse Secure").
  • This changes your Mac’s login password, FileVault password and your GVSU Network password all at once.

Enterprise Connect Menu with Change Password selected

What will happen if I change my password on a reset website, or if the password is changed by the Service Desk?

Whether you've changed your password via Okta, or the GVSU Password Reset Website, there are a few steps after that will happen on your Mac to get its password in sync:

  • If you’re logged into your Mac and connected to the GVSU network while the password change happens:
    • You’ll be prompted to update your Mac’s password once Enterprise Connect detects it’s out of sync with your GVSU network password.
    • You can force this check by signing in/reconnecting with Enterprise Connect.
  • If your Mac was off, or you’re not logged in:
    • You will need to use your previous password to sign into your Mac.
    • Once you're signed in and back on the GVSU network, Enterprise Connect will detect that your Mac’s password is out of sync.
    • Enterprise Connect will prompt you to update your Mac’s password to match your network password:

Enterprise Connect notification - Your login and Active Directory passwords may not match. Enterprise Connect will attempt to sync them. Enter your login password - the one you use to log into your Mac and unlock the screen saver:

What happens if I completely forget my GVSU Mac’s password?

  • Try your last known password(s). You may not have your Mac's password after a network password change.
  • If you completely forgot the password, contact IT Services. After ID verification they can provide a recovery key.
  • The recovery key will allow you to reset your Mac’s password and get it back in sync with your GVSU Network password.

What are these changes, how do they work and why are we changing?

Most organizations use a directory service to let one username and password access all services—email, websites, and computers. This is called "directory binding" or "binding." However, Apple security features like FileVault disk encryption, and Keychain (which stores your saved passwords) were not designed to allow other software and services to change, reset or update these passwords on their own.

Apple no longer recommends binding for Macs assigned to a single person. Instead, they recommend tools like Enterprise Connect to handle these services. Once your GVSU Mac is set per Apple's recommendations, it can detect when your network password has changed and prompt you to update the Mac's password to match.

 
Was this helpful?
100% helpful - 1 review

Details

Article ID: 12957
Created
Wed 3/29/23 12:18 PM
Modified
Tue 5/2/23 3:06 PM