leewakelam Posted June 10, 2014 Posted June 10, 2014 Hello, Please HELP!!! We have an Art classroom with 11 macs in running Mavericks. We have a mac server which copies user info from our windows active directory as we are a predominetly a windows school. We are connecting the macs to our active directory domain and also our open directory server. Our problem is that certain macs will allow pupils to lon on and others wont, the screen will shake indicating wrong login information however this is not the case as they can lon on fine to our wondows machines. Can anyone please help???? Im not sure if this will have anything to do with the problem but we use Deploy Studio to image our macs I have made sure that the macs have the time and date set to our windows DC so the isue doesnt lie here Any help would be great thanks Lee
samurl_ Posted June 10, 2014 Posted June 10, 2014 Hiya, Have you tried logging the machine in as ladmin and checking under System Preferences > Users & Groups > Login Options > you should have a green light saying 'Multiple' if you're bound to OD & AD, click 'Edit...' You should see two green lights next to the two directories.. Rebind your AD domain and see if that makes a difference. It can sometimes fudge in my experience.
IanRoberts Posted June 10, 2014 Posted June 10, 2014 check if the time of the mac differs from the time on the server. I believe it fails logon if the time differs by more than 3(?)mins. If so set time in settings to sync with apple.europe.com
Sagima Posted June 10, 2014 Posted June 10, 2014 I have ours set to get their time for one of the domain controllers like the windows PCs do.
woody Posted June 10, 2014 Posted June 10, 2014 Also to cover the basics: check that students are not typing a space before their username. We have that all the time. I think they press spacebar to come out of the screen saver and it types the character into the username box. Then when they type in their username and password it's not correct. We are using MLion here though.
samurl_ Posted June 10, 2014 Posted June 10, 2014 Sagima - that's the best way to do it as then providing the windows machines are logging in correctly you know it won't be an issue with the mac.
leewakelam Posted June 11, 2014 Author Posted June 11, 2014 round2it - could you explain how it was the DNS please as im sure thats the cause of the problem here thanks Lee
Crumpet Posted June 11, 2014 Posted June 11, 2014 Check the time on the Mac is correct first. If unbinding/re-binding open & active directory doesn't work, delete the Mac from Active Directory on your server then try and re-bind again. We have around 10 mac's and they don't play nice with Windows at all. As it's only specific pupils who use them on an A-Level course, i've given up and set up a default local user on the macs with a locked password. The teacher now backs up their work at the end of the lesson onto removable media and copies it onto the network.
round2it Posted June 12, 2014 Posted June 12, 2014 (edited) What i did to fix this was to setup a new dns server and point the macs to the new dns server. Unbind and bind the macs Did you find that unbinding and rebinding worked and lets you log on but after a reboot the macs did not authenticate. Edited June 12, 2014 by round2it
leewakelam Posted June 13, 2014 Author Posted June 13, 2014 Once you set up the new DNS server did that solve your issues for good? Deleting the macs out of AD, unbinding and binding again fixed the problem, sar far they are all working in terms of pupils being able to log onto them. Im just waiting for that call to say they are not working again Still cant figure our why im getting the error message in workgroup manager when i try to make any changes. Lee
samurl_ Posted June 13, 2014 Posted June 13, 2014 Are you authenticated in WGM as diradmin before attempting to make changes?
Brimstone Posted June 13, 2014 Posted June 13, 2014 Could be... .local domain Forward and Reverse DNS correct, check below Testing forward and reverse DNS - MacEnterprise Read Write Access all the say to users home folder on Windows Server? Have a read for best practise... http://training.apple.com/pdf/wp_integrating_active_directory_mav.pdf 2
round2it Posted June 14, 2014 Posted June 14, 2014 cant explain why the new dns worked. but it did also added ip reservations for all the macs. no trouble so far. my dns passed all tests but a new one dns server fixed the issue. oh i remember my backup domain controller died and it held dns role also think the macs latched onto that server and would not let go.
seawolf Posted June 15, 2014 Posted June 15, 2014 We have around 10 mac's and they don't play nice with Windows at all. Macs play very well with Windows. In fact, they work just as well as the Windows PCs on our Windows 2008R2 SP1 network - if not better. If you have a worst practice .local domain all bets are off however and you will have some problems from time to time. If you have misconfigured DNS you will have problems as well. Otherwise, you should pay someone to setup the Macs on your network. It's OK to acknowledge that you don't have the necessary expertise to do a particular thing in the big wide world of IT. No one can know everything. I wouldn't know where to start in configuring a Cisco switch, but I can handle the HP ProCurves just fine as well as lots of other things. But, if I tried to configure a Cisco switch and stuffed it up it wouldn't make sense to blame the Cisco switch. Take a look at the information provided by @Brimstone and if you can work out where it went wrong and fix it, great. Otherwise find someone who can and your students and teachers will have a much more enjoyable experience.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now