adding macs to a 2003/2008 domain

[sted]

ive been given the job of looking into this over the holidays and have been given a mini mac to play with (ive also managed to get hackingtosh running on a laptop) anyone know of any good sites with info on or care to share anything lol. Btw ive barely used macs but out of the company i work for more of my schools have macs or are interested in them so ive been nominated lol

[tim.dalton]

Really easy...

 

On the Mac, go Applications-Utilities-Directory Utility, it should see your AD automatically, fill in the details, done!

 

Pretty good Apple PDF on this here if you need more detail, and bombich.com is always a good bet for anything Mac.

 

Tim

[sted]

right its in ad and i can log on to it as an admin (its my test domain at home and atm no other users)

 

it seems to map my user area correctly (although it defaults to saving to the local drive grrr) if its in the form \\server\username$ but if i use (as is most common in my schools) \\server\users$\group\name i just get a users$ mapped (and i cant see how to get it to show on desktop for all users not just me after ticking a box

 

i have pilfered a script to map other drives but that just seems to ask for a username and password (though username is filled in) when run even though im using the same credentials and i cant see a way of getting that to work for user area unless i can somehow assign a script to a bunch of users so 2008 group get it with 2008 pre plumbed in

 

Set strUserName to do shell script “whoami”
set strFileServer to “Fileserver”
set strMount to “smb://” & strFileServer & “/” & “sharename1″
mount volume strMount
set strMount to “smb://” & strFileServer & “/” & strUserName & “$”
mount volume strMount

[sted]

right ive ditched that script for another and it now logs in with no prompt (i think due to getting hacked off and trying the fqdn rather than short name on the off chance)

 

next question how do i set a script so it runs for anyone who logs in? i can assign it to my user but i want to assign it so any pupil who logs in gets network drives mapped

 

set MyName to do shell script "whoami"

tell application "Finder"

try

mount volume "smb://gateway.school03.local/" & MyName & "$"

do shell script "ln -s /Volumes/" & MyName & "$ ~/Desktop"

end try

try

mount volume "smb://gateway.school03.local/" & "resources$"

do shell script "ln -s /Volumes/" & "resources$" & " ~/Desktop"

end try

end tell

Edited July 27, 2009 by sted

[tim.dalton]

This should do it...

 

Every user is easy, although splitting pupils and staff users might be harder using login scripts.

 

Tim

[sted]

This should do it...

 

Every user is easy, although splitting pupils and staff users might be harder using login scripts.

 

Tim

 

i cant make head nor tail of that link lol. Though i take it that there is no simple equivalent of shoving my .app file in an all use startup folder like windows?

[MkII]

Really easy...

 

On the Mac, go Applications-Utilities-Directory Utility, it should see your AD automatically, fill in the details, done!

 

Pretty good Apple PDF on this here if you need more detail, and bombich.com is always a good bet for anything Mac.

 

Tim

 

Thanks for that. Doesn't work for me tho'.

 

New Mac Pro

We have a .local domain (.local).

I ran the commands in the PDF and it brings back the domain IP.

I've tried binding to an OU but it comes back with 'unknown error' after entering admin credentials.

DNS seems to be setup correctly.

 

Any ideas?

 

Cheers

Edited July 29, 2009 by MkII

[somabc]

Did you see the section on .local domains in the pdf

.local domains

Since Mac OS X uses the .local domain for Bonjour (link-local addressing), it will conflict with any .local AD domain. To get around this, add .local to the search domain settings in the Network preference pane. All .local DNS queries will be unicast to the DNS servers before being multicast to the network. Beginning with Mac OS X v10.5.4, the Mac OS X client recognizes .local domains, and the addition of .local into the search domain settings is not necessary.

 

Sometimes it helps to pre-create the Computer in the OU and to specify a domain server by name.

 

Alternatively you can use Likewise Open Source Software that Authenticates Linux, Unix, and Mac systems with Microsoft Active Directory

Edited July 29, 2009 by somabc

[MkII]

OK thanx for that somabc. Will give it a try in the morning.

 

Yeah I saw that and added it, tho' I assumed this to be a new version of OSX.. must check that (oops )

Edited July 29, 2009 by MkII

[sted]

also check the clocks on the apple and the server my apple was an hour fast and wouldnt add

[mac_shinobi]

Thanks for that. Doesn't work for me tho'.

 

New Mac Pro

We have a .local domain (.local).

I ran the commands in the PDF and it brings back the domain IP.

I've tried binding to an OU but it comes back with 'unknown error' after entering admin credentials.

DNS seems to be setup correctly.

 

Any ideas?

 

Cheers

 

Not sure how much this helps from the above mentioned pdf but

 

.local domains

Since Mac OS X uses the .local domain for Bonjour (link-local addressing), it will

conflict with any .local AD domain. To get around this, add .local to the search domain

settings in the Network preference pane. All .local DNS queries will be unicast to the

DNS servers before being multicast to the network.

Beginning with Mac OS X v10.5.4, the Mac OS X client recognizes .local domains, and

the addition of .local into the search domain settings is not necessary.

 

If you disabled bonjour - would that be an option ?

[MkII]

Thanks very much for the further suggestions. This is running OX10.5.7 so .local shouldn't be an issue. The clock is a couple of minutes out so that shouldn't be either.

 

I can't ping the domain name (on any client) but our guys say it should still attach. I can ping the DC via IP but when using the Directory Utility to attach it tells me there's no response from the DC.

[mac_shinobi]

Thanks very much for the further suggestions. This is running OX10.5.7 so .local shouldn't be an issue. The clock is a couple of minutes out so that shouldn't be either.

 

I can't ping the domain name (on any client) but our guys say it should still attach. I can ping the DC via IP but when using the Directory Utility to attach it tells me there's no response from the DC.

 

DNS Issues then - to join apple macs to a domain DNS has to be working 100% both forward and reverse - helps anyway

Edited July 30, 2009 by mac_shinobi

[MkII]

Right - the replicating server is coming back to this building on Monday so I think I'll try again then.

 

Thanks for now!

[SC-UK]

Is the replicating server that's coming back one which holds any/all of the FSMO roles?

[tim.dalton]

DNS Issues then - to join apple macs to a domain DNS has to be working 100% both forward and reverse - helps anyway

 

Sorry, been offline since this thread started. Just wanted to agree- if you can't ping by name then it won't be able to join. Fix that, pretty sure the AD bind will work ok then.

 

Tim >:-)

[MkII]

Cheers Tim