migration from OD to AD + Profile Manager

[jayartibee]

I have a MacPro server running 10.6.8 with about 200 childrens home folders.

 

I am planning on moving all home folders to a new Cisco AD server. Basically I want all clients (Leopard to Yosemite) to authenticate to the AD, and load up the User's home folder etc, PLUS I wish to control each child's profile with Profile Manager on a new Mac Mini running Yosemite and Apple Server.

 

Is this possible - and how easy? Can anyone talk me through the client and Apple Server setup?

[Brimstone]

I wouldn't event start to describe other the work or how complicated this would be.........

 

I would VERY strongly recommend you get an Apple Certified Systems Admin to come in and advise before you even start.

 

What do yo reckon @AntonioRocco?

[jayartibee]

but isn't it what most people do? Apple have stopped producing real servers so everyone's using Windows server?

[Brimstone]

but isn't it what most people do? Apple have stopped producing real servers so everyone's using Windows server?

 

True that you are better off moving over to AD for your accounts...however if any of the classes are using FCP or creating lots of tracks in Logic you will need to use local homes for any of these projects.

 

Moving from OD accounts to AD ones is a difficult process with ACL's, permissions and your existing AD Schema to think about.. That's why I said you need someone who really understands some of the problems and pitfalls with this

[jayartibee]

Would it be easier to archive all current Home Folders and create a new one for each user on the AD, using WorkGroup Manager?

[AntonioRocco]

Workgroup manager is deprecated (has been since 10.7) and you really should not be using it for 10.9 (mavericks) and/or 10.10 (yosemite). However it still does work (assuming you can put up with the odd crash and error message?) after a fashion. Secondly, even when it was not deprecated WGM has only ever had read only access to Active Directory. Which means you can't use it to create new home folders for users on AD.

 

What you're proposing can be a lot of work especially if you don't fully understand the underlying technologies in both directory systems. if you've the budget, a 3rd-Party consultant who can guide you through it, would be beneficial.

 

Antonio Rocco (ACSA)