Mac OD/AD Integration

[gtg93]

Hi All,

 

Firstly, I've seen the sticky but seems slightly out of date - as are the other posts I can find on Edugeek and elsewhere so hoping someone could offer some info / advice?

 

We currently have a suite of 15 macs - running (I believe) OSX Sierra, and a mac server running the same version of OSX with the server add-on. Currently, they're configured (albeit, patchyily) in the old Magic Triangle setup, linking OD to AD however I'm under the understanding that's the old way to go about things.

 

We're looking for a better way to configure the macs to allow login via AD authentication, and allow the users to have access to their Windows home folders and shared drive on the macs too. However we still need the ability to be able to push policies out to the macs too.

 

Can anyone offer any advice? The best way to go / links to some relevant information. https://support.apple.com/kb/PH26282?viewlocale=en_US&locale=en_US - I've found this which has some info, but not being a mac expert (or user) I think I'm going to need a bit more of a guide or at least more info on the matter. I think the last time I did anything in depth related to macs was when we first set these up a few years ago.

 

Anything at all is appreciated, 3rd party tools will also be considered too.

 

Cheers

Edited July 25, 2017 by gtg93

[SamanthaD]

Forget magic triangle and bind the clients to AD directly - lots of topics on here with walkthroughs on how to bind, map home drives etc.

 

Although it's not the best, then use your server to manage policies etc with Profile Manager. Should get you to a working solution, perhaps someone might be able to help out with a logon / logoff script to get you started?

[aarongulley]

Hi,

 

I would setup a deploystudio server and create a image for your macbooks, configure and setup Profile Manager on the macOS Server along side Munki.

 

Then you want to create a workflow within DeployStudio where it will bind to AD, install the management profile, configure munki.

 

Munki allows the users to install Apps and remove apps without the need of Administration.

 

You can configure mostly everything through Profile Manager it's very similar to Apple Configurator if you've used that before.

 

Let me know if you need any help.

 

Thanks

 

Aaron.