User Directory appears on desktop - Mavericks

[midweek]

Hi All

 

No doubt this is related to the funky SMB issues with Mavericks but....

 

I have upgraded a couple of clients to Mavericks 10.9.4 and enrolled them into Profile Manager successfully. Most of the settings seem to push successfully (Dock looks OK, an SMB share to a windows shared server area works as does an AFP share to the Mac Server) however whenever a network user logs in it mounts on the desktop the hidden directory where all my AD user folders are kept (lets say "\\winserver\users$" as an example).

Now the logged in user can open this share and browse through all the other user folders regardless of the permissions set on the Windows Server side.

 

Now I know Mavericks and SMB don't get on but how do I stop the folder mounting in the first place?

 

As a rule we don't bother with the home folders from AD as the pupils just share their work using a shared folder on the Mac server or the mounted SMB shared folder I specify in Profile Manager.

 

Cheers for any thoughts on this!

[RobOgan]

Just removing the mount without fixing the permissions issue may be putting a band-aid on a nicked artery. I would try to resolve the perms issue by enabling veto files in SMB, see if that removes the browsing, then worry about removing the shortcut. If you just remove the mount they can find a way to get back in there without the mount.

[midweek]

Thanks Rob

 

I had to reset Profile Manager and then specify local home folders using the Mobility settings which seems to have removed the issue. The other SMB share I mount through profile manager does actually display the correct permissions.

 

Progress at least.

[RobOgan]

Make sure the permissions are holding in the samba file after a reboot of the service. I had an issue on a server once where my smb.conf kept getting reset ocassionally, I would have to change it back and reset samaba to fix it. I copied the desired config and had a cron job copy and replace the smb.conf file over every twenty minutes to get me through until Summer when I had to rebuild it to fix it.