What to do if the Kerberos SSO (ADSROOT) dialog boxes keep coming up

On the first login to macOS – either clean install or OS upgrade – when on the campus network or at home and connected to the VPN - users will be presented with the following dialog boxes:

Open

If these boxes keep coming up at login after the user has gone through them all once – this means that there is some problem with the user’s Active Directory password.

To solve this problem, please do the following:

1 – Have the user change their UM password at https://password.it.umich.edu

2 – On the Mac, open System Preferences → Users & Groups and have the user change their computer password to the new UM password.

3 - Restart the Mac to confirm the user can unlock/log-in to the mac with the new password

4 – The Enterprise Connect dialog boxes will come up again – but when the user goes through them one more time to “sync” the passwords – that should be it!