Jump to content

seawolf

Members
  • Posts

    975
  • Joined

  • Last visited

Everything posted by seawolf

  1. Have you checked the logs in Console to see what is triggering the error? This might shed some light on it. I tested mapping shares with Profiles and determined that it wasn't 100% reliable, but didn't get that error from memory. I decided to use an AppleScript to map the network shares, which is saved as an app with a nice icon and run at login. It can also be run if the shares disconnect while the user is logged in, which happens quite often since so many of our teachers just close the lid and can go weeks or months without actually logging in to their account on the network (sigh). The script that I use is below and can be edited easily for use in any environment: try set loggedInUser to do shell script "whoami" set accountType to do shell script "dscl . -read /Users/" & loggedInUser & " | grep UniqueID | cut -c 11-" set nodeName to do shell script "dscl . -read /Users/" & loggedInUser & " | awk '/^OriginalNodeName:/,/^Password:/' | head -2 | tail -1 | cut -c 2-" set ADGroups to do shell script "dscl " & quoted form of nodeName & " -read /Users/" & loggedInUser & " | awk '/^dsAttrTypeNative:memberOf:/,/^dsAttrTypeNative:msExchHomeServerName:/'" if accountType is less than 1000 then tell me to quit end if if ADGroups contains "AllStaff" then mount volume "smb:///Staff/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///MediaLibrary/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///Scans/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "AllTeachers" then mount volume "smb:///Curriculum_Archives/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///IWB/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///Reports/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///Teachers/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "IWB_Group" then mount volume "smb:///Teachers/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///IWB/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///Scans/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "OHS" then mount volume "smb:///OHS/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "AdminDepartment" then mount volume "smb:///Admin/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "FinanceStaff" then mount volume "smb:///Finance/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "PrimaryStudents" then mount volume "smb:///Primary/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "PrimaryTeachers" then mount volume "smb:///Primary/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "ICT" then mount volume "smb:///Installers/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///ICT/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///Archives/" & loggedInUser & ";" & loggedInUser & ":password" mount volume "smb:///ISO-Library/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "VCAL" then mount volume "smb:///VCAL/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "MediaStudents" then mount volume "smb:///VCD/" & loggedInUser & ";" & loggedInUser & ":password" end if if ADGroups contains "MediaTeachers" then mount volume "smb:///VCD/" & loggedInUser & ";" & loggedInUser & ":password" end if on error error_message number error_number display alert ("One or more NetworkDrivefailedtoinstall. Pleasereportthiserrortothe ICT Help Desk. ") ¬ message error_message ¬ ¬ & (" Error number ") & error_number & "." end try p.s. you can also use "afp" rather than "smb" shares in the script. We mostly use AFP, but I edited it as I suspect many on here will just be using SMB.
  2. Acronis Access (previously MobilEcho) allows you to open and save any files to/from the server as well as copy/paste or move files. You can also create new folders and sync entire folders or shares to your iPad. MS Office docs can also be created and edited. Integrates with Sharepoint servers as well. Costs $5,000 per year here for a site license (unlimited file servers and users). Other options are Foldr or School eLockers.
  3. Well, we still use some 1st gen iPads and there are very few apps we are unable to use even though they are limited to iOS5. Plus the iPad Mini (original) is running pretty much the same hardware as the iPad 2 and is still being sold. I think you'll be fine for a while...
  4. What version of Windows server are you using? We don't have local users permissions set on any shares and do not experience these issues, not have I seen them. We are on 2008 R2. Edit: What is the directory structure of your shares? How many levels down from the root of the drive are they?
  5. There is a good guide for this on Krypted.com - Using Profile Manager 3 In Mavericks Server | Krypted - - - Updated - - - There is a good guide for this on Krypted.com - http://krypted.com/mac-os-x/using-profile-manager-3-in-mavericks-server/
  6. It's only the webblocker and spamblocker components of the Watchguard that are lacking. They make an excellent firewall and VPN. The SSO is sadly lacking and we replaced this as our web filter almost 4 years ago with iBoss. We still use the Watchguard as a firewall and the VPN works great on Mac, Windows, and iOS. You will struggle to get webblocker working well and to your liking though I'm afraid. On a side note - because the iBoss is so good and they now have a full-featured UTM appliance now, we are considering moving everything to the iBoss when we refresh our firewall/web filter solution. There really is no better web filter out there for the money than the iBoss. No other filter I've seen comes close. iboss Network Security - Web Filtering, Application Firewall & Reporting Solutions for Medium to Large Networks
  7. You really shouldn't have "Local Users (server)" with permissions to this share. This is the cause of the issue. EDIT: @FN-GM beat me to it.
  8. If users on the Macs can access other staff members home drive files then the Windows security permissions are NOT set correctly on the share(s), full stop. The Macs are just revealing an existing security flaw. Now, if they can just SEE the top level folders, but have no access to them that's a bit different.
  9. We use 4 x APC Smart-UPS rackmount UPS (link below) along with four battery extenders. Provides 3 hours up time for our network rack and 1 hour for our server/storage rack. http://www.apc.com/resource/include/techspec_index.cfm?base_sku=SMX3000RMHV2UNC&tab=models
  10. This one is very good http://www.wisesoft.co.uk/software/bulkadusers/default.aspx
  11. It sounds like this user may have had a failover to local profile on that computer at some point and created this files. In that instance, the files would only reside on the local computer as folder redirection would have temporarily been unavailable (loss of network).
  12. Google apps for education doesn't have the same age restrictions as a normal Google Apps account because the school controls the account. Also, unless you have failed to disable some of the social media features such as Google+ you are actually providing protections they almost certainly aren't at home. Now, there is the issue of Google scanning student emails for ad data, which isn't too kosher and I'm in Australia and can't speak to child protection laws in the UK...so take this advice/information with caution as you might be in non-compliance with some random regulation some senseless politician may have enacted without a shred of thought for its implications in the real world.
  13. With 4.4% of the world share of the browser market methinks IE6 and all of the poorly maintained Windows XP boxes in the wild is the far bigger risk. Particularly with XP about to meet its zero-day doom all the while over 95% of the worlds ATMs and (and many banks) are still running XP. http://www.modern.ie/ie6countdown
  14. 1. Go paperless or get very restrictive with your Print Management software (Papercut, etc.) so users are restricted and get smacked with multiple "do you really want to print this?" messages all day. 2. Migrate to Google Apps or Office 365 (both free) and make use of Google Drive or One Drive to also reduce need to print (share, don't print) 3. Switch from PCs to Chromebooks and Chromebox. Inexpensive and integrated into Google Apps if you go that route. Limited? Yes. They asked you to put forward cost cutting measures. Cost cutting when their is little fat has consequences. In this case the change would be painful, but might actually lead to big savings and improved productivity in the long-run. No software licensing costs, reduces backend server requirements (file servers, reduce number of DCs, backup storage and software). It would also reduce your support costs in the long term (though not at the start).
  15. Sounds like some of you are describing the sorts of issues you will get if you use Macs on a .local domain...
  16. I wasn't sure exactly what you want to do, but software update enabler worlds well for changing the SUS setting on a client, or resetting them to Apple servers. Reset SUS on client - http://www.allocinit.net/apps/suenabler If you are having issues with your internal SUS then take a look here. SUS setup - http://krypted.com/tag/software-update-server/ Sent from my iPad
  17. Yep, that will certainly do it.
  18. Are you on a .local domain? This can be a factor in issues like this. If it's only two out of many that are doing this and the network point tests fine, you might want to re-image one of them and see if the same thing continues to occur.
  19. seawolf

    OSX and Office

    Sorry, missed that.
  20. seawolf

    OSX and Office

    This may help - MCX | OfficeforMacHelp.com If you were using Casper Suite, you could just run Composer and launch MS Office 2011 on a new user to capture the plist created at startup (registration), then pre-populate this with default details and copy into the default user template of your image. Then, every user who logs in would have the registration or FirstRun plist pre-populated and they wouldn't get prompted.
  21. The only people I have ever heard even requesting this are: 1. Photographers (professional and hobbyists) 2. Tech heads (i.e. The type of person who would be on Edugeek) 3. Tech writers trying to get maximum page visits or promoting maximum bloat of features on every tech product. If tech writers had their way, a smartphone would be able to cook your dinner and drive your car for you. Other than that, the percentage of people who purchase smartphones and even know what RAW photos are would be in the low single digits if it were even 1%. Then there would be the people who would even care or use it, which would probably be a fraction of 1% of all users. In product development that is called an outlier use case.
  22. But, I still ask why is there a push for RAW support on a PHONE? Do you think that even 1% of the users of smartphones would ever even use this feature? Adding feature after useless (or unused) feature just adds to the cost, complexity, and reliability of systems.
  23. Typically between $750 and $950 in Oz depending on the model. Course, we pay more for almost everything, even our own wine and beer.
  24. Sounds like the client may not be getting a response from the DHCP server. Have you checked the DHCP server for the MAC address of the client to see if an address is requested or provided? You may need to use wireshark to see what requests the client is sending out and what the server is responding with (if anything). You may need an ip-helper if you are PXE booting across VLANs.
  25. If you are going to buy a new Core Switch, I would make sure it is 10Gb capable so that you can eventually use 10Gb uplinks to your end point switches. Make sure the backplane supports this and that the switch can provide enough 10Gb SFP+ ports (modular) to do this in the future (e.g. If you have 8 end-point switches, ensure your core can handle at least that many SFP+ connections). Also, you might want to consider 10Gb to the servers before moving all end clients to 1Gb in a large environment. In a small environment it's not important, but if you have 500+ clients that can end up being your bottleneck also makes backup/restore ops much faster. If the end point switches aren't that old, you may be able to hold off for another 1-2 years on upgrading those and spread out the cash you have to spend upgrading the network. Unless this is likely to be your one and only shot at getting the money for a good long while.
×
×
  • Create New...