martin_hannah

I've tried this again today on a new test folder structure with correct permissions as per apeman's previous post and I've still got the same issue. I can now browse to the users folder from the users$ share but this still isn't ideal.. I ideally want students to be able to access their network home drives directly. All I want to know is if what I am trying to achieve is actually possible or if my best bet is to revert back to username$ shares (not favourable) Thanks, Martin

And it's server 2003 standard. Thanks! Martin

Yes I would much prefer not not have to rely on login scripts but at the moment it's the only way of getting the student's home drives mapped for them. (however flaky it's being) The permissions need sorting out over the half term as students currently have the ability to write directly to the users$ share which is occasionally getting mapped for them on both mac and windows. To sort this i'm going to remove all 'Local users' write permissions, not sure how this got there in the first place.. Permissions are as follows; Highest Level; E:\Users - Shared as users$ Share Permissions - Everyone Full Control NTFS - Auth Users - Read/List/Transverse - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data E:\Users\ADSync - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data E:\Users\ADSync\Students - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data - Staff - Read/List/Transverse E:\Users\ADSync\Students\YearGroup - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data - Staff - Read/List/Transverse E:\Users\ADSync\Students\YearGroup\Username - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data - Staff - Read/List/Transverse - Username - Full So students, being a member of authenticated users and local users (through domain users) do have at least transverse permissions all the way down the folder path. Cheers for the help for far! Let me know your thoughts.. Martin

Thanks apeman, The network home drives are all on a server 2003 box, the macs connect using SMB. I tried applying all permissions suggested by yourself and it is still mapping the root of the share as a drive which is 3 levels up from the users folder ie; \\server\users$\ADSync\Student\YearGroup\Username Is there anything else I can try? On another note the script that I am using for mapping the drives is now failing.. I copied the script locally and set it to run on log in through WGM. This was fine for a while but it's now corrupted the script .app file. Is there a better way to run log in scripts in an open directory environment, the script is written in applescript. Many thanks, Martin

Kirchie, This worked previously before the student's UNC paths were changed, it seems that the macs weren't too happy with the home directory being a subfolder within a share. The staff here still have their home directories UNC paths shared out like \\server\username$ and that works fine it's just the students who have had their UNC paths changed to \\server\user$\Students\Yeargroup\Username Spent a while checking through everything in directory utility to no avail so I went down the scripting route.. How are your UNC paths inputted in AD out of interest? Cheers, Martin

Our macs here used to be set up so users got their AD network home drives mapped when they login in when the path was in the following format in AD; \\fileserver\username$ However to make adding new users easier for ourselves we changed the AD accounts so the home directory path is now as follows; \\fileserver\users$\Students\YearGroup\username This works fine in windows but on the macs it just maps users$ which they don't have permission to so.. Is there an easy way of fixing this? I've written this applescript which ejects the users$ share, queries AD for the current users home directory, converts the \\ into / and maps that as an SMB share. However i'm hoping there's an easier way of doing this that i've missed as i've got to apply this to around 100 macs.. set diskName to "users$" tell application "Finder" if disk diskName exists then eject disk diskName else end if end tell set homedir to (do shell script "dscl /Active\\ Directory/domainname.org.uk -read /Users/$USER SMBHome | grep \\\\\\\\.* -o") set x to SaR(homedir, "\\", "/") on SaR(sourceText, findText, replaceText) set {atid, AppleScript's text item delimiters} to {AppleScript's text item delimiters, findText} set tempText to text items of sourceText set AppleScript's text item delimiters to replaceText set sourceText to tempText as string set AppleScript's text item delimiters to atid return sourceText end SaR set networkhomedir to the result mount volume "smb:" & networkhomedir as text Any suggestions would be greatly appreciated. Many thanks, Martin

Yup, I thought that would work too. But when the user logs in they are then asked to choose between the 2 groups.

I am in the process of setting up an open directory domain at a school.. The school would like the students to have different network shares mapped depending on which year they're in. So I have created individual groups for the year groups and added the relevent users to each year. I have also create and added all students to an "All Students" group, I wanted to use this for applying preferences to all student accounts. Unfortunatley when the OD accounts are set up like this it means that the students are prompted to pick either "All Students" OR "YearBlah" when they log in.. They only work around I can think of is to delete the "All Students" group and apply the "All Student" polcies to all of the year groups individually. I am a bit reluctant to do this as it will A - take a long time and B - make it difficult to quickly apply policies to all students. So my question is - is there a way for users to be a member of 2 group in OD without promting the user to choose which group they want to be a member of. Many thanks in advance!

I can log in with guest and that is it, once logged in as guest I can then access sys prefs and set auto login which works.. On that thread it mentions that their keychain was corrupt but i'm having the same problem with brand new accounts which don't have a keychain so there's no pref file to delete.. At the moment i've left it logging in automatically but I need to be able to log in as different users. Thanks for the quick reply, Martin

I have a standalone iMac which was recently upgraded to OSX lion. It has a really peculiar problem where the guest login works but when you try to log in as another user the screen goes grey as if it's logging in then quickly returns back to the log in screen.. It's really strange because I logged in as guest and set it up to automatically log in as one of the local accounts and that worked fine.. I just want to be able to choose which user you log in as on the main log in screen. I've tried creating a new account but I still had the same issue. Any help is greatly appreciated. Thanks,

I've got this one mac that's refusing to refresh - It's picking up half of the policies, I tried flushing the cash as you suggested but it's still only picking up some of the policies.. I've also tried renaming, rebinding, readding to the group in WGM. Still same deal.. It's small things like all users are still get the default dock alongside their managed dock.. and local admin can't refresh preferences when logging in.. All other macs in the group are fine it's just this one! Any other tricks I can try? Cheers, Martin

Are there any other schools out there using iWeb as part of the Media Studies curriculum? It's been a nightmare over here in from an IT support standpoint as none of the resources are self-contained.. The trouble is they really like using iWeb it's just really flakey and it's lost students work on several occasions. (missing/corrupt pages - missing resources etc) Are there any alternative easy to use web editors out there for mac that could be used instead? Needs to be more stable than iWeb! Thanks, Martin

I'm using a mac mini server on 10.6 to manage 10.6 clients and I am unable to apply the policy to only show managed printers. The students here still have access to around 8 old printers that they shouldn't have access to any more. Also only some of them are getting the policy to not merge with the users dock so some of them are getting the managed dock merged with the local default dock. Help is appreciated as always! Many thanks, Martin

Yea I tried both domain\username and just username, same permissions error..

I've set up a WebDav share on our Mac Mini Server which is accessible from ipads on the network. The mac mini server is bound to AD. We would like to access the same share from the windows (AD) side using SMB. I have shared the folder out using SMB and given the AD user full permission to the folder. From the windows side it asks for authentication when browsing to the folder. If you put in the AD authentication info it fails saying there is a permissions issue. If you put in an open direction user name / password it connects fine. Is there something that I am missing here? Any help appreiciated. Cheers, Martin