GoldenWonder

On our 10.9.4 OSX server we use Workgroup Manager to deploy preferences. One requirement is a few shortcuts to various folders in the dock. This works fine, but only for up to 3 items, whenever I try to add the fourth item I get the error: "Error wile saving record " Connection failed to the directory server (com.apple.OpenDirectory:2100) Out of the 4 links, 3 are to NAS boxes and 1 to a windows server. It doesn't matter what order you try and add them - but when you add the fourth you get the error! I've searched for this problem, but I seem to be alone in this one

Cheers, I'm running a few tests with DelProf2 as that seems to have the flexibility we need.

Yes, but we wanted to have a more controlled approach (like we did on XP) where for example students profiles would be removed more frequently than staff. And administrators logins would be left alone. The profile worked when I tried it (IIRC, it was a while ago) but it deletes the lot as it just matches on date.

We run a vbscript by GPO on machine boot to delete older profiles (the date varies, from 14 days to several weeks) as we use local (no roaming) profiles across the network. This doesn't seem to be working - lots of old profiles are left behind. When we run the script manually with debug messages we can see the profiles are 'selected' correctly, but a delete of one can take a long time (30 seconds or more!) and I'm guessing this might be causing the script to timeout. The script is below. We leave a few local profiles alone (local ones,admins etc) Can anyone see where I'm going wrong with this? When I run it directly, with the debug messages on I can see the profiles are being correctly identified as ones to delete, the delete part just seems to take ages, and the local profiles are small (<50mb) I reformat the date to make sure that the dates are matched exactly, although this probably isn't necessary it does work. On Error Resume Next Dim objFSO, objWMIService, strComputer, strFilter, intMaxProfileAge, colProfiles, objProfile, dtmLastUseTime strComputer = "." strFilter = "SID Like ""S-1-5-21%"" And Not LocalPath Like ""%Administrator%""" ' Maximum Age of profile intMaxProfileAge = 14 Set objFSO = CreateObject("Scripting.FileSystemObject") Set objWMIService = GetObject("Winmgmts:\\" & strComputer & "\root\cimv2") Set colProfiles = objWMIService.ExecQuery("Select * From Win32_UserProfile Where " & strFilter) If Not colProfiles Is Nothing Then For Each objProfile in colProfiles dtmLastUseTime = CDate(Mid(objProfile.LastUseTime, 7, 2) & "/" & Mid(objProfile.LastUseTime, 5, 2) & "/" & Left(objProfile.LastUseTime, 4) & " " & Mid (objProfile.LastUseTime, 9, 2) & ":" & _ Mid(objProfile.LastUseTime, 11,2) & ":" & Mid(objProfile.LastUseTime, 13, 2)) If DateDiff("d", dtmLastUseTime, Date) > intMaxProfileAge Then Err.Clear 'MsgBox objprofile.localpath & " datediff= " & DateDiff("d", dtmLastUseTime, Date) objProfile.Delete_ 'msgbox err.number End If Next End If Either the VB method of profile deleting is just very slow by nature, or I'm doing this the wrong way!

I've got a TMG 2010 box here that acts as our firewall. Basically all web access goes through a smoothwall box and out to the LEA and the TMG box is the default gateway for the other access (local LEA and similar) We mainly use this to allow access to specific sites on the LEA's subnets (websites that are effectively internal but not on our network) The primary rule to do this is to Allow access for the internal network to the specified subnets (the LEAs) for HTTP/S and PING etc. This works fine and as expected. However when I run the Traffic Simulator and test whether it would allow access to http://www.madeupsite.com or any actual website it says the above rule matches the packet and allows it! Am I missing something here? With this one rule the destinations are explicitly set to the LEAs server addresses, yet any website 'passes' on this rule! This is the only rule in place as the next rule is the default 'Deny All', the logging actually shows my Allow rule is allowing the access based on a packet match: "The rule Allow local Bypass matches the packet. The packet is allowed." So TMG is saying it would allow access based on the fact it matches on HTTP, even though the destination does not match? I thought the rule had to match everything to be allowed? EDIT: After staring at this for hours I've realised it was all down to a typo!!!

Well I've found a fix, sort of. Removing the LDAP and AD settings in the Directoru utility (and rebooting) and everything works OK. I know these macbooks get their preferences (including proxy) from the xserver when in school, but offline a seperate login is used. Not sure why the ica client is reading proxy settings that aren't applied to that user?

I'm wondering whether I need to create a customised .ica file then? Is that possible, to link to this site and make sure no proxy is used.

Yeah we can get to the site, and login successfully! Just not run any apps

Checking the CAG logs doesn't seem to show anything different for the failed sessions than the sucessful sessions. Nothing obvious anyway. Sessions where the apps have started OK (from a windows PC for example) are showing the same message pattern as the failed Mac sessions.

Our system uses a Citrix Access gateway.

The proxy isn't relevant in this case as its external Macbooks accessing our internal Citrix server - i.e there is no proxy at the user end. The users can login and see the applications list correctly (and browsing is fine)

Does the same thing in Safari and Firefox - latest version of FF as well. In Windows it works with IE and FF, and Ubuntu works with FF

We don't seem to get to that stage. The 'Launching' part appears and then hangs at approx 50% on the progress bar. After about 30 seconds or so the error appears. I've tested this on several Macs and a couple of different test sites - all fail the same way. PCs and Linux boxes work fine on both test sites?

We have a XenApp Citrix system to allow staff to login from home. This works fine with all Windows PCs but recently we have noticed no Mac (Imac or Macbook) will work. They can login and get the applications list, but running any of the Apps always comes up with the error: SSL Error 4: Proxy Connection Failed: The configured proxy server does not answer Error number 183 Annoyingly, Citrix don't even seem to have any knowledge of this error, despite it having a number! If there was a configuration error then the Windows machines wouldn't work. I seem to remember the Macs worked originally, so I'm not sure whats changed! And the proxy error is odd as these are home computers with no Proxy! The error only affects Macs and is on 10.6.2 and 10.6.5 (that I've found so far) Any ideas on this one before I really go off Macs! Edit: Tested on Ubuntu and all working fine there too! Obviously Citrix Client and Macs no longer work for some obscure reason!

We're slightly different in our setup. OD just dishes out preferences (basic server) and clients use AD for authentication. The problem comes when we set clients to map their home directory to their AD share name. It works - but we get these complete system hangs. If we force the home directory to the local drive, no hangs. But as we wanted the macs to integrate properly and not have manual file copying this isn't a good solution. Obviously SMB is the problem, but what part of it is causing the problem I'll never know! Anyone got a smb.conf file I can compare ours against?

Shame, I wondered if it was a driver issue. I've tested a Macbook (similar generation with 10.6.5 but not intel based) with the same setup and theres no issues at all, no hangs and no errors connecting.

Thing is we'd have to now pay an ACSA engineer stupid money and the basic problem seems to be os x has a broken implementation of SMB. Very disappointed here that we've come to the point as I had high hopes for these macs, but they aren't usable with a windows network. I wonder if we can roll one back to 10.4/5 and see if that works? We only have 10.6.2 install disks that come with the macs.

Yeah it was decided here that, on balance, the teachers would benefit more from being able to freely access their work.There is the risk of accidental deletion but its been very rare and as for privacy, well, they're only supposed to be storing school work in there anyway!

Do you allow Staff to access/modify students work in their personal folder? We allow all teaching staff RO access to the students folders, and certain departments also get RW for marking etc. The students folders are accessed from links on the intranet. We also have a VLE but this is used differently by each department.

Yes, the conclusion we've come to here is that Macs simply aren't suited to working in a mixed network. All Mac network or standalone might be ok, but as far as I'm concerned they just don't work correctly with AD/SMB or anything vaguely Microsoft. And their support is poor - so we're ditching in favour of Windows 7. Cheaper too.

We seem to be unable to use google maps on XP machines running IE7 or 8. On W7 IE8 works fine and on the XP machines Firefox works fine so I guess its not a filtering issue. The problem is that they get an error (Object Expected) in the toolbar as soon as they navigate to maps.google.com- from then on the zoom doesn't work and you can't get directions. I've done all the stuff google suggest (clearing the cache yada yada) but that unsuprisingly hasn't made much difference! Anyone come across this? A web search seems to show lots of issues with few solutions.

Yes - I installed on the client. Then I used printmanagement.msc to copy the drivers over to the server. I can see the drivers as being installed on both client and server but the client cannot access the networked printers on the server. EDIT - got this working but manually. Using Add Printer, local printer, local port and specifying the port as \\server\printer. The specifiying the driver manually works fine! Shame the script won't work anymore. It does seem to have worked on our 32bit W7 machines though

I've used the "rundll32 printui.dll,PrintUIEntry" script to add printers to PCs (printers are all on a Windows 2003 Server) and it works fine with XP. Doesn't work at all with Windows 7 x64 though. Even though I've put the 64bit drivers on the print server I just get an error running the script saying the 'printer is not available check your network connection' If I try to manually add the printer using the control panel I always get the error '0x000000a Windows cannot connect to the printer' Does this when I try to install a printer with a 32bit driver or a 64 bit driver. As the script and the manual method fail I'm guessing MS haven't got a way for a 64bit clients to use printers shared on 32bit servers?

Just resurrecting this old thread. Still cannot get iplayer working on macs (through a proxy). Windows machines work fine on both IE and Firefox but nothing works on the macs. Set the proxy server for every protocol but it doesn't seem to even try and hit the proxy. I guess iplayer on the macs is just a non starter - if it works, it works. If it doesn't forget it!

Update - found a page on Citrix saying "the underlying cause is unknown" so I guess this is a known bug after all.