Centrify Suite 2010 - anyone know how to set this up?

[morganw]

I'm running the 30 day evaluation version on a Server 2008 R2 test system, I can only get the Centrify policies to import into the local group policy settings on the server, it won't let me import them into another other GPO.

 

I'm also unsure of what I would do to redirect the home folders onto something (either OS X server or maybe SAMBA) and keep the home folder permissions correct.

 

Also not sure how to structure the Centrify zone with AD.

 

Basically I don't know what i'm doing. Can anyone help?

[TheScarfedOne]

Ive got the previous version of Centrify on my network - and it runs ok. I will screen grab the bits you ask for - hopefully they havent changed too much! Had the upgrade notification but not done it yet!

[morganw]

Thanks, i've managed to get it working but i'm unsure of my settings for the unix account mappings. At the moment i've got the provisioning agent to generate the account IDs based on the AD SID, and then also generate a new primary group for each user based on the AD SID. I've also set it to not truncate the usernames to 8 characters.

 

My main worry is the primary group, all the management will be done through AD anyway but i'm worried about ramifications of generating so many of them.

 

Are you using the provisioning agent or are you manually setting up the accounts?

[TomH]

Do you need to redirect the home folders in your environment ? If not i would suggest just using a AutoZone

[morganw]

Yes, I would like to keep the home folders separate from the windows ones, I know when I tried the Apple AD plugin it just dumped the Apple home directory structure on top of the windows structure. So you ended up having a My Documents/Documents folder, and a My Documents/Desktop folder. Will be doing mostly video editing so it may require a separate storage server local to the Apple Mac room as well.