Using profile manager with LDAP

[dloudon96]

Hi all,

 

Sorry if this has been posted before but I'm trying every possible thing that I can do and it's not working properly...

 

Basically my boss left a few months ago, he set up the Apple Server;

 

We image the iMacs/MacBooks via deploy studio,

 

Server has profile manager setup (well, this is what I'm trying to get working, as it was looked at but then pushed under the carpet for a while).

 

I know that the apple server is bound to active directory and is syncing with our users/groups, there's a lot of groups. Basically when I click on a single student, I can see they are a member of the following groups on the Apple server;

 

Studentusers1

Pupil-user (this group is on our AD server)

Everyone.

 

Is there a way to set it all up again without wiping the server as we've got iMac and MacBook images stored on there. I'm just wanting to remove all the users from them above groups and create a machine policy which applies to the machine and then another one which customises the users dock etc, something like group policy, but with it being apple it's not that simple.

 

Apple remote support has been terrible, he kept saying that they don't support the Windows server (I'm not asking about the Windows server, I'm asking about the Apple server). Any help would be massively appreciated. If needs be I can speak to you on the phone to make it a little easier to explain... If you want to email me, my email is [email protected]

 

Thanks a lot

 

Dan

[dloudon96]

Hello,

 

Just to let people know. I've created a device group which contains my machines (cr2-machine-settings) and applied my machine policies, login screen message, display username and password box and shutdown, restart and sleep buttons. I also put the energy saver option in there too.

 

I then went on the groups tab underneath the device groups option, then typed in 'pupil-user', this is the Group which all students have, this is assigned through active directory, I then set my policies for the dock, desktop wallpaper, disable system preferences etc. I then assign the each machine to the machines policy and go to the settings cog and update the settings then reboot the machines. This is what I was wanting to do all together anyway, and Apple said this wasn't possible. Anyway... Managed to get it working. just thought if anyone else was stuck this may help then.

 

Dan

[2097]

Hello,

 

Just to let people know. I've created a device group which contains my machines (cr2-machine-settings) and applied my machine policies, login screen message, display username and password box and shutdown, restart and sleep buttons. I also put the energy saver option in there too.

 

I then went on the groups tab underneath the device groups option, then typed in 'pupil-user', this is the Group which all students have, this is assigned through active directory, I then set my policies for the dock, desktop wallpaper, disable system preferences etc. I then assign the each machine to the machines policy and go to the settings cog and update the settings then reboot the machines. This is what I was wanting to do all together anyway, and Apple said this wasn't possible. Anyway... Managed to get it working. just thought if anyone else was stuck this may help then.

 

Dan

 

Thats how profile manager works is it not ?

 

We are bound to AD , i have all our macs in OD groups with profiles set

 

All my users are in AD groups with different policies applied to each AD group . Easy when its all working correctly . Our users also have there home drive set to there AD home drive and i have a custom setting to create shortcuts on there desktop to access there AD Documents and their Mac documents

[dloudon96]

It sure is but I'm new to profile manager etc, my boss who left used to deal with the Mac side of things but obviously now I'm having to. It sure is easy when you know how lol.

 

Thanks

[2097]

It sure is but I'm new to profile manager etc, my boss who left used to deal with the Mac side of things but obviously now I'm having to. It sure is easy when you know how lol.

 

Thanks

 

I hope that didnt sound condescending i just thought i was maybe missing something . I hope all goes well and don't forget to document for the next lot if you want to make it easy for them.