+ Post New Thread
Results 1 to 4 of 4
Mac Thread, AD-OD Workgroup Manager in Technical; We have a successful implementation of the magic triangle within our district.... Sort of. We ARE able to manage AD ...
  1. #1

    Join Date
    Dec 2009
    Location
    USA
    Posts
    10
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    AD-OD Workgroup Manager

    We have a successful implementation of the magic triangle within our district.... Sort of.

    We ARE able to manage AD user accounts when they are imported into a group in workgroup manager, however we ARE NOT able to manage AD groups when they are imported into a new group in workgroup manager. Has anyone else encountered this? Everything else works great, users can login with AD credentials, there network home automatically mounts, but we are not able to manage them based on there AD Group. If I add a specific user account to that group, login as them, the management settings apply fine. With the size of our district it is not realistic for us to add each user account into specific groups.

    Any help would be much appreciated, and if I did not provide enough information let me know and I can get that out quickly.

  2. #2
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,505
    Thank Post
    10
    Thanked 508 Times in 445 Posts
    Rep Power
    116
    You have to create an OD group and then add the AD group to that.

    Edit: Also certain group names are reserved and may already be in use on the Mac, make sure it's not got a really common name.

  3. #3

    Join Date
    Dec 2009
    Location
    USA
    Posts
    10
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I have done that and the Names of groups are not common. They're: schoolname_students

    Quote Originally Posted by DMcCoy View Post
    You have to create an OD group and then add the AD group to that.

    Edit: Also certain group names are reserved and may already be in use on the Mac, make sure it's not got a really common name.

  4. #4
    AntonioRocco's Avatar
    Join Date
    Oct 2008
    Location
    South Yorkshire
    Posts
    270
    Thank Post
    11
    Thanked 114 Times in 95 Posts
    Rep Power
    41
    Hi

    "Has anyone else encountered this?"

    Yes and No. Assuming your AD structure is fairly flat then you could query it from a bound mac workstation using the command line utility dscl. See if the groups can be correctly accessed. For usage launch Terminal and issue man dscl. It's fairly obvious thereafter.

    Do these groups appear in WorkGroup Manager? Can you see individual user membership of those groups within WorkGroup Manager? To view Active Directory LDAP records using WorkGroup Manager enable the Inspector Option. Launch WorkGroup Manager, click on the WorkGroup Manager Menu, select Preferences, enable the option to "show all records tab and inspector". You can safely dismiss the warning dialog box that follows. Don't worry about deleting or modifying the AD Schema using this method. Remember you only have read only access to a bound LDAP schema.

    What you should see now is the addition of an extra icon (looks a bit like a bullseye) as well as an extra tab labelled Inspector. Select this and you should be able to authenticate to the /Active Directory/All Domains node by providing an AD admin account that has authority for the AD Domain. Select a Group you're interested in and inspect its Group membership. Does it tally with what you see in AD?

    What about adding the General Domain Users Group OU instead? Would not this OU be populated with all users automatically anyway?

    Antonio Rocco (ACSA)



SHARE:
+ Post New Thread

Similar Threads

  1. Workgroup Manager Not Applying Preferences
    By newbie2010 in forum Mac
    Replies: 15
    Last Post: 23rd March 2012, 09:19 AM
  2. Replies: 10
    Last Post: 26th March 2009, 07:17 PM
  3. Workgroup Manager / Managing Macs
    By brahma in forum Mac
    Replies: 3
    Last Post: 3rd December 2008, 01:02 PM
  4. Replies: 3
    Last Post: 11th January 2008, 08:02 PM
  5. Workgroup PC on WSUS
    By mattx in forum Windows
    Replies: 4
    Last Post: 25th June 2007, 01:44 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •