Profile Manager Groups Empty

[Neophyte]

Hi, I'm fairly new to MAC's & OS X, so go easy.

 

One of my schools have a Server 2008 R2 domain, our IT Suite is made up of 32 dual boot Mac Mini's. Until the latest Yosemite upgrade our Mac Server was running Workgroup Manager and applied restrictions, mapped drives etc. But Workgroup Manager is no more.

 

Moving to Profile Manager seems to have thrown up a whole world of pain. Following Apple and Google'd guides I completely removed Workgroup Manager and Apple Server app. Re-installed the Server app, and set-up the AD/OD integration from scratch. I've set-up Profile Manager and all the AD users and groups appear. BUT, the AD Groups listed in the OD have no members listed. We have AD OU's for Students, with Year 1, Year 2 etc nested within the Student OU. Each year Group has it's relevant students in it, each with their own log on. So, when I look in OD, the Student Group has no members - but it should have 6 for years 1 - 6. Likewise, Year Groups 1 - 6, have no users listed. If I double click the Group to open it's properties, the users are there? But closing the group properties, no users are listed against the group? Students can log onto the MAC's with their AD credentials, just that no restrictions or mapped drives etc get applied even though they are enrolled in Profile Manager.

 

A collogue suggested creating OD groups, and copying the AD users into the OD groups to get around the issue. So, I'd have the original AD Student group, with the AD year groups, in addition to ODStudents, with ODYear1, ODyear2 etc and copy the relevant students into the correct OD group. With 100's of users, and no apparent way to bulk copy and AD year Group into an OD year Group, that idea looks like a job to take me into retirement... Unless someone knows a script to do it, or knows what the original issue with Groups is?

 

Thanks in advance..

[mark9000]

I have seen this problem on and off across different set ups in different locations, and across different versions of the Mac OS. The on consistency that I can see is Windows 2k8 server. The group memberships are empty in OD (whatever version of Mac OS and Server) with Windows 2k8. This was not the case with a Windows 2012 install I worked on recently. I am no Windows expert, so it may not be the Windows Server version but something in the configuration.

 

I hope this helps