Someone please explain OD permissions to me
Background information so you know where I stand:
I've been thrown in the deep end with managing a Mac network, having no education with Macs, no training, no nothing.
I've learn't enough about Windows Servers at college, and one course on Windows Server Administration and about 7 months actually using what I learn't in practice, and only 3 weeks with actually being able to use Windows Servers, rather than watching.
I've been managing the whole Mac network (Xserve on 10.5 with 50-60 iMacs also 10.5) for as long as I've been in this job (about 9-10 months). The line manager gave me an iMac and told me to play and find out everything, which I did and thought I done well considering I had never used a Mac before.
Watched a Mac professional set up the Xserve and give a rough understanding on how to do network shares and basic application permissions. Also used a huge number of manuals downloaded from the internet about a number of things.
I've put in a request for Mac training but due to the time of year it seems a while away for now.
The Problem / Request:
Myself and the art department have been pulling our hair out because of applications not being allowed to run for some staff, however it works for other staff in the same department. If I allow it for the one member of staff its not working, it will stop working for another member of staff. But its only one of the three at a time (Not one not allowed, two allowed changing to Two not allowed, one allowed) therefore making me think its not a problem with the group settings.
I add permissions for a Staff OD Group, in which all the staff are members of, I have checked.
I added in the application by using Sever Admin Tools Workgroup Manager on the client, dragging and dropping the application into the Applications Pane. If they request to be signed, I sign them.
I have had problems with Keychain Minder, Smart Tools 10, Microsoft Office and HP All in one Scanner / Printer software.
This is just is a start of the list.
I would love to know if I am adding in permissions correctly, or if there is another way?
I would love to know why there is always one member of staff not allowed to use something?
I would love to know how permissions work?
I would love to know about this application signing?
I would love more documentation on setting permissions and using workgroup manager?
Many thanks in advance.