asanders

Here check out this Jamf Nation thread https://www.jamf.com/jamf-nation/discussions/14294/finder-sidebar-settings-using-configuration-profiles Most of the folks in that thread seem to be just calling the script from another script.

We use an inventory auditing software called OCS-NG. Its free and does a fairly good job for inventorying machines. When it inventories it will grab the current logged in user. You could force a scan at login. The other option would be to setup a webserver and when ever a user logins or logouts it issues a curl command with the username and machine. At a previous job we did something similar by outputting to a csv on a fileshare.

I would ditch WGM and move to profile manager. The switch really isn't that bad. What I like about it the most is that I don't have to bind my macs to OD anymore. All we do now is just bind them to AD during imaging with DeployStudio. We also do the trust profile and enrollment profile but have had mixed results. So we almost always just push them out using ARD and installer package. There are MCX to Profile conversation tools out there. Check out this script it might be able to help you out. https://github.com/matt4836/changeSidebarLists/blob/master/Change_Sidebar_List.py There is a thread on Jamf that speaks specifically to this script.

No problem. Good Luck

Hmm... Lets double check a few things. If you open the group up in AD and click on members does it list any users in there? Is the user account enabled? Next lets check to make sure we have the correct path for the group in the query. In AD users and comptuer you need to enable advanced feature under View click advanced features. Open up the security group and click on Attribute Editor. Scroll down to distingushedName and double click to open then select all and copy. Now lets modify the query. The bold area is the only area where you should have to modify by pasting. Then copy the query and paste it into the custom search. Please note there shouldn't be any spaces in this query. Before: (&(objectclass=person)(memberOf=CN=ownCloudAccess,CN=Users,DC=domain,DC=local)(!(userAccountControl:1.2.840.113556.1.4.804:=2))) After: (&(objectclass=person)(memberOf=CN=ownCloudAccess,OU=Groups,DC=domain,DC=ntwrk)(!(userAccountControl:1.2.840.113556.1.4.804:=2)))

Here is a helpful tip to trouble shoot this issue. Goto Active Directory Users and Computers. Then right click on the domain and click find. In the "Find:" drop down select "Custom Search". Then click on the "Advanced" tab. This will allow you to trouble shoot your ldap query. So try this query and see what it generates for you. (&(objectclass=person)(memberOf=CN=ownCloudAccess, OU=Groups,DC=domain,DC=ntwk)(!(userAccountControl:1.2.840.113556.1.4.804:=2))) If this query returns the expected result than the next step is to look at why ownCloud isn't returning the same results. Make sure the following settings are correct. user login filter: (&(sAMAccountName=%uid)(objectClass=person)(member Of=CN=ownCloudAccess,OU=Groups,DC=domain,DC=ntwk)(!(userAccountControl:1.2.840.113556.1.4.804:=2))) user list filter: (&(objectclass=person)(memberOf=CN=ownCloudAccess, CN=Groups,DC=domain,DC=ntwk)(!(userAccountControl:1.2.840.113556.1.4.804:=2))) I suggest leaving in the userAccountControl this way disabled users can't get in. Is ownCloudAccess security group is in the OU Groups? Also becareful copying and pasting spaces can get inserted and this can mess with the results. Hope this helps

I agree with Steve it could be a simple a typo. Could you post the command syntax that you are using? Tip I would suggest just running CMD on the remote machine and than try the command you want to run. psexec \\computer1 -u domain\username -p Pa$$w0rd cmd This helps when you are trying to trouble shoot if it is the command you type into psexec or just the command itself is the problem.

Are you looking for user that is in this group AND this group? If so this should work (&(objectclass=person)(memberOf=CN=ownCloudAccess, CN=Users,DC=domain,DC=local)(memberOf=CN=othergroup, CN=Users,DC=domain,DC=local)(!(userAccountControl: 1.2.840.113556.1.4.804:=2))) If you are looking for an OR try this (|(&(objectclass=person)(memberOf=CN=ownCloudAccess,CN=Users,DC=domain,DC=local)(!(userAccountControl:1.2.840.113556.1.4.804:=2)))(&(objectclass=person)(memberOf=CN=othergroup,CN=Users,DC=domain,DC=local)(!(userAccountControl:1.2.840.113556.1.4.804:=2))))

Awesome!! Glad I could help.

Below is my settings, i used this forum post to help generate my settings. OwnCloud Forums • View topic - LDAP Server 2008 R2 I hope this help you out some. Also enable debugging to see what is causing the problem. I recommend using tail to view the logfile directly instead of using the web interface. host: xx.xx.xx.xx Base: ou=department,ou=users,ou=building,dc=domain,dc=local name: [email protected] password: xxxxxxxxx user login filter: (&(sAMAccountName=%uid)(objectClass=person)(memberOf=CN=ownCloudAccess,CN=Users,DC=domain,DC=local)(!(userAccountControl:1.2.840.113556.1.4.804:=2))) user list filter: (&(objectclass=person)(memberOf=CN=ownCloudAccess,CN=Users,DC=domain,DC=local)(!(userAccountControl:1.2.840.113556.1.4.804:=2))) port: 3268 base user tree: ou=department,ou=users,ou=building,dc=domain,dc=local base group tree: cn=users,dc=domain,dc=local Group-Member association: uniqueMemeber use TLS: unchecked case insensitive: unchecked Display Name Field: sAMAccountName Email Attribute: mail

I did have the same problem. The solution was to change my base from OU=SomeOU,dc=Domain,dc=Local to ou=someou,dc=bwsd,dc=local I just had to lowercase everything in Base, Base User, & Base Group. Hope this helps

Thanks! In fact I just got off of the phone with them and this does seem like it is going to do what we want it to.

Here is my problem in our district we have a total of 28 laptop carts. None of these laptop carts have printers. Lately teachers have been asking for access to printers either by installing a printer on a cart or giving them access to a copier/printer in their building. We understand their need to have access to printers and would like to come up with a solution for them. The following are not options giving them direct access to copiers/printers or installing printers on the carts. In a perfect world this is how we would like our solution to work. Have a web based release station for teachers to access a print queue. When a teacher logs in to the web based release station they would see a list of Printers. Then the teacher would click on the printer and see the jobs sitting in the queue and release/delete any job on that printer. I’m trying to avoid having to install any software on a computer to do this. Currently we have a product called CZ Job tracker and it works well for tracking printer usage. It does have an add-on for a release station, but it is an application you have to install. I have taken a quick look at Papercut-ng this product held great promise, but the web based release station shows all of the printers. I only want the teachers to see the printers I specify and I only want them to see printers in the building they are stationed in. In a brief back and forth with Papercut they did tell me that I could install multiple instances of their product to try and get my desired results. However reporting would be an issue. So can anyone recommend a printer management product that is web base that might allow me to do what I’m looking for?

Think of PSExec like this it allows you to remotely execute a command on a machine. In this case we just want to run a batch file. I'll try and create a step by step example for you Step 1. Create batch file called copy.bat and place it on a network share that can be accessed by everyone. ie \\server\share Step 2. Place the shortcut you want in the same network share as copy.bat ie \\server\share\Shortcut.lnk Step 3. Edit copy.bat and type this copy "\\server\share\Shortcut.lnk" "C:\Documents and Settings\All Users\Desktop\" Step 4. Create a text file called computers.txt in the root of your C:\ and in that file just list your computers you want this batch file to run on. ie. Computer1 Computer2 Computer3 Computer4 **Note The reason we are creating this text file is because we want a list of computer names and psexec will execute the batch file on every computer that is listed in that text file. Step 5. In CMD type this "psexec @C:\computers.txt -u domain\UserWithAdminRights -p Pa$$Word -d "\\server\share\copy.bat" **Note that I added this -d because I just want the batch file to run and disconnect. Otherwise you will see the batch file run on each computer and well that can take forever.

Sometimes when I want to be quick and dirty about something i'll use psexec. In your case i'd just have a batch file located on a network share that runs the copy command. Then i'd create a text file that contains a list of the machines i want to hit. I usually use a program called lookatlan to scan the network and do an export. Then i'll just execute this command psexec @c:\computer.txt -u domain\user -d "\\server\share\copy.bat" There actually is away to use group policy to place a shortcut on a desktop as well. Currently I'm using Win 7 and if you are using you GPO Management you can goto Computer Config/Preferences/Windows Settings/Files Here just do a file replace of the ICO image for your shortcut. Then go to Config/Preferences/Windows Settings/Shortcuts then just create the shortcut you want.