Disease Posted January 12 Posted January 12 As per the title, I see the Sticky thread but the last post on that was 12 years ago, so is there an up-to-date method for joining them into your domain so users get mapped Drives etc. Many Thanks
AlphamaleZed Posted January 12 Posted January 12 If this is for student macs then save yourself time and dont bother its so iffy now we just go with a shared single account or guest account. The apple guidance is pretty decent.https://support.apple.com/en-gb/guide/mac-help/mh27627/mac 1
Disease Posted January 12 Author Posted January 12 Yes it's for Student Mac books in Music, I wanted them to be able to log in and get access to shares but by the sound of it it seems very flakey.
3s-gtech Posted January 12 Posted January 12 Logging in with AD accounts is super-easy - just go to Directory Utility and add your FQDN, enter an admin username and password, and check that the login options suit. It works fine. Adding shares etc is not so easy - we use an MDM for that (Jamf) which also manages other aspects. You can alternatively set them up to log in with an M365 account on your tenancy by setting them up with ASM, but not done that with Macs here, only iPads. 1
AlphamaleZed Posted January 13 Posted January 13 17 hours ago, Disease said: Yes it's for Student Mac books in Music, I wanted them to be able to log in and get access to shares but by the sound of it it seems very flakey. Yeah its flaky, we use a Guest account, globe on the dock with the path to connect to a share. smb://cred:[email protected]/student$ - Clicking this once in the dock maps and connects pre authd. I have these two too in the dock: /Applications/Logic Pro.app /Applications/Google Chrome.app Also, if you are using a shared account, just enforce sign in on chrome so you have monitoring ontop of filtering. Also, use imazing profile editor its great if you dont pay for JAMF or use alongside.
Gongalong Posted January 13 Posted January 13 We use Mosyle for management and that can domain join via a profile. We did find that it would come off the domain again and the profile had to be reapplied, but I think that has stabilised in recent years (or at least our head of music hasn't complained about it so much).
AlphamaleZed Posted January 14 Posted January 14 23 hours ago, Gongalong said: We use Mosyle for management and that can domain join via a profile. We did find that it would come off the domain again and the profile had to be reapplied, but I think that has stabilised in recent years (or at least our head of music hasn't complained about it so much). Is Mosyle better than JAMF? I may be looking to move away maybe to intune or mosyle.
Gongalong Posted January 14 Posted January 14 I started with Jamf, because it seemed to be the most popular system, but ironically they couldn't figure out how to get domain joining to work via a profile and their support wouldn't help me further. I then tried Mosyle and found their support much more helpful, and between them and I we figured it out. I still find Mosyle a good system.
DrCheese Posted January 14 Posted January 14 Take a look at platform SSO instead of old school AD joining on MacOS also
Gongalong Posted January 14 Posted January 14 Can you login to MacOS via 365? We weren't using 365 so heavily when we bought our iMacs, but I'd be interested to know if it's an alternative (we'd probably still need MDM to lock them down sufficiently).
DrCheese Posted January 14 Posted January 14 10 minutes ago, Gongalong said: Can you login to MacOS via 365? We weren't using 365 so heavily when we bought our iMacs, but I'd be interested to know if it's an alternative (we'd probably still need MDM to lock them down sufficiently). Yes sorry I should have said what Platform SSO is ! If you setup Platform SSO, it lets you logon with your M365 details & then auto syncs the stuff through to MS apps/browsers within MacOS. Works really well (I have it on mine) 1
AlphamaleZed Posted January 14 Posted January 14 5 hours ago, DrCheese said: Yes sorry I should have said what Platform SSO is ! If you setup Platform SSO, it lets you logon with your M365 details & then auto syncs the stuff through to MS apps/browsers within MacOS. Works really well (I have it on mine) Interesting. Do you use Intune for this or? If you can let me know can test on my work mac.
DrCheese Posted January 14 Posted January 14 Yes, intune. https://learn.microsoft.com/en-us/intune/intune-service/configuration/platform-sso-macos 1
kevin_lane Posted January 15 Posted January 15 Strange we have over 30 Mac mini and 2 of our Music department solely use there Mac’s for delivering lessons Our Mac’s are enrolled in Jamf and apply our background image, which I did have to get Jamf to get as wasn’t the easy things to deploy. our smb shares are mapped via jamf Aswell if your having issues common things to look for Time DNS Computer Account in AD we had issues with the time wondering but since we got our self a Time Server, our red dot of doom has been a thing of the past. also ensuring that your AD computer accounts for the Apple device are in AD are binded ok you shouldn’t have much issues we use our Macs within our Music department, I think the only issues that does seem to be creeping in and it’s not a Mac issue as such but issue with garage band, where by you can’t save directly to a network share you have save to work to the desktop close the application and then move / copy the saved file to there home directory. but it can be done yes you will pull your hair out sometimes, as issue can appear out of nowhere and for no apparent reason. But stick with it, it’s all a learning experience as well, what breaks you makes you stronger lol
Disease Posted January 15 Author Posted January 15 12 hours ago, DrCheese said: Yes, intune. https://learn.microsoft.com/en-us/intune/intune-service/configuration/platform-sso-macos I have tried this following the instructions and they Platform SSO configuration file shows that it failed to apply and I am unable to log in.
AlphamaleZed Posted January 15 Posted January 15 2 hours ago, kevin_lane said: Strange we have over 30 Mac mini and 2 of our Music department solely use there Mac’s for delivering lessons Our Mac’s are enrolled in Jamf and apply our background image, which I did have to get Jamf to get as wasn’t the easy things to deploy. our smb shares are mapped via jamf Aswell if your having issues common things to look for Time DNS Computer Account in AD we had issues with the time wondering but since we got our self a Time Server, our red dot of doom has been a thing of the past. also ensuring that your AD computer accounts for the Apple device are in AD are binded ok you shouldn’t have much issues we use our Macs within our Music department, I think the only issues that does seem to be creeping in and it’s not a Mac issue as such but issue with garage band, where by you can’t save directly to a network share you have save to work to the desktop close the application and then move / copy the saved file to there home directory. but it can be done yes you will pull your hair out sometimes, as issue can appear out of nowhere and for no apparent reason. But stick with it, it’s all a learning experience as well, what breaks you makes you stronger lol how do you delete accounts on logoff? we idealy want them delete after logoff. Garageband i noticed if you open after the drive is mapped it works. 1
kevin_lane Posted January 15 Posted January 15 7 hours ago, AlphamaleZed said: how do you delete accounts on logoff? we idealy want them delete after logoff. Garageband i noticed if you open after the drive is mapped it works. @AlphamaleZed Tbf that is my next task but I feel it’s going to be some sort of scripting that needs to happen, keep me informed if you find something and vice versa
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now