Home folder permission issues - 'Everybody - no access'

[stoney101]

Hi there, i'm a bit of a newbie with macs so please bear with me...

 

 

After updating one of our AD bound (using the golden/magic triangle) imacs from 10.8 to 10.11 (or even 10.10) any new user account we create in AD or any user who has previously NOT logged into one of the imacs before the upgrade is unable to save, I believe this is due to an everyone no access persmission being added to the mac home folders (desktop,documents,music,movies etc.)as shown in attachment 1. Users who have previously logged onto a mac before when it was running 10.8 do not have this issue and are able to use it without a problem.

 

 

Looking on the Windows side of things for new users with this issue, even when trying to access the Mac home folders as admin on the file server we get access denied with an everybody deny permission in force as shown in attachment 2. Again users who have previusly logged into a machine running 10.8 do not have this permission on their home folders.

 

 

I know there was a thread about a similar issue recently but I couldn't find a definitive answer. Any help would be much appreciated as we are looking to upgrade our whole suite soon.

[slancaster]

We had huge problems with permissions and discovered it was due to the SMB protocol. We now run SMB 1 on our Macs and they seem ok with our AD and SAN setup.

 

Try enabling SMB protocol on the clients (can send out via terminal or add to base image) and we then deleted user library folders as these where all corrupt.

 

to use SMB1 system-wide (for all users) by entering this command in Terminal:

 

sudo sh -c "echo '[default]' >> /etc/nsmb.conf; echo 'smb_neg=smb1_only' >> /etc/nsmb.conf"

 

 

To restore the default SMB2 you simply need to delete the newly created configuration file (nsmb.conf) with the command:

 

sudo rm /etc/nsmb.conf