martin_hannah

I've tried this again today on a new test folder structure with correct permissions as per apeman's previous post and I've still got the same issue. I can now browse to the users folder from the users$ share but this still isn't ideal.. I ideally want students to be able to access their network home drives directly. All I want to know is if what I am trying to achieve is actually possible or if my best bet is to revert back to username$ shares (not favourable) Thanks, Martin

And it's server 2003 standard. Thanks! Martin

Yes I would much prefer not not have to rely on login scripts but at the moment it's the only way of getting the student's home drives mapped for them. (however flaky it's being) The permissions need sorting out over the half term as students currently have the ability to write directly to the users$ share which is occasionally getting mapped for them on both mac and windows. To sort this i'm going to remove all 'Local users' write permissions, not sure how this got there in the first place.. Permissions are as follows; Highest Level; E:\Users - Shared as users$ Share Permissions - Everyone Full Control NTFS - Auth Users - Read/List/Transverse - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data E:\Users\ADSync - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data E:\Users\ADSync\Students - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data - Staff - Read/List/Transverse E:\Users\ADSync\Students\YearGroup - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data - Staff - Read/List/Transverse E:\Users\ADSync\Students\YearGroup\Username - Not Shared NTFS - Creator/Owner - Full - System - Full - Local Administrators - Full - Local Users - Transverse/Write Data/Append Data - Staff - Read/List/Transverse - Username - Full So students, being a member of authenticated users and local users (through domain users) do have at least transverse permissions all the way down the folder path. Cheers for the help for far! Let me know your thoughts.. Martin

Thanks apeman, The network home drives are all on a server 2003 box, the macs connect using SMB. I tried applying all permissions suggested by yourself and it is still mapping the root of the share as a drive which is 3 levels up from the users folder ie; \\server\users$\ADSync\Student\YearGroup\Username Is there anything else I can try? On another note the script that I am using for mapping the drives is now failing.. I copied the script locally and set it to run on log in through WGM. This was fine for a while but it's now corrupted the script .app file. Is there a better way to run log in scripts in an open directory environment, the script is written in applescript. Many thanks, Martin

Kirchie, This worked previously before the student's UNC paths were changed, it seems that the macs weren't too happy with the home directory being a subfolder within a share. The staff here still have their home directories UNC paths shared out like \\server\username$ and that works fine it's just the students who have had their UNC paths changed to \\server\user$\Students\Yeargroup\Username Spent a while checking through everything in directory utility to no avail so I went down the scripting route.. How are your UNC paths inputted in AD out of interest? Cheers, Martin

Our macs here used to be set up so users got their AD network home drives mapped when they login in when the path was in the following format in AD; \\fileserver\username$ However to make adding new users easier for ourselves we changed the AD accounts so the home directory path is now as follows; \\fileserver\users$\Students\YearGroup\username This works fine in windows but on the macs it just maps users$ which they don't have permission to so.. Is there an easy way of fixing this? I've written this applescript which ejects the users$ share, queries AD for the current users home directory, converts the \\ into / and maps that as an SMB share. However i'm hoping there's an easier way of doing this that i've missed as i've got to apply this to around 100 macs.. set diskName to "users$" tell application "Finder" if disk diskName exists then eject disk diskName else end if end tell set homedir to (do shell script "dscl /Active\\ Directory/domainname.org.uk -read /Users/$USER SMBHome | grep \\\\\\\\.* -o") set x to SaR(homedir, "\\", "/") on SaR(sourceText, findText, replaceText) set {atid, AppleScript's text item delimiters} to {AppleScript's text item delimiters, findText} set tempText to text items of sourceText set AppleScript's text item delimiters to replaceText set sourceText to tempText as string set AppleScript's text item delimiters to atid return sourceText end SaR set networkhomedir to the result mount volume "smb:" & networkhomedir as text Any suggestions would be greatly appreciated. Many thanks, Martin

Yup, I thought that would work too. But when the user logs in they are then asked to choose between the 2 groups.

I am in the process of setting up an open directory domain at a school.. The school would like the students to have different network shares mapped depending on which year they're in. So I have created individual groups for the year groups and added the relevent users to each year. I have also create and added all students to an "All Students" group, I wanted to use this for applying preferences to all student accounts. Unfortunatley when the OD accounts are set up like this it means that the students are prompted to pick either "All Students" OR "YearBlah" when they log in.. They only work around I can think of is to delete the "All Students" group and apply the "All Student" polcies to all of the year groups individually. I am a bit reluctant to do this as it will A - take a long time and B - make it difficult to quickly apply policies to all students. So my question is - is there a way for users to be a member of 2 group in OD without promting the user to choose which group they want to be a member of. Many thanks in advance!

I can log in with guest and that is it, once logged in as guest I can then access sys prefs and set auto login which works.. On that thread it mentions that their keychain was corrupt but i'm having the same problem with brand new accounts which don't have a keychain so there's no pref file to delete.. At the moment i've left it logging in automatically but I need to be able to log in as different users. Thanks for the quick reply, Martin

I have a standalone iMac which was recently upgraded to OSX lion. It has a really peculiar problem where the guest login works but when you try to log in as another user the screen goes grey as if it's logging in then quickly returns back to the log in screen.. It's really strange because I logged in as guest and set it up to automatically log in as one of the local accounts and that worked fine.. I just want to be able to choose which user you log in as on the main log in screen. I've tried creating a new account but I still had the same issue. Any help is greatly appreciated. Thanks,

I've got this one mac that's refusing to refresh - It's picking up half of the policies, I tried flushing the cash as you suggested but it's still only picking up some of the policies.. I've also tried renaming, rebinding, readding to the group in WGM. Still same deal.. It's small things like all users are still get the default dock alongside their managed dock.. and local admin can't refresh preferences when logging in.. All other macs in the group are fine it's just this one! Any other tricks I can try? Cheers, Martin

Are there any other schools out there using iWeb as part of the Media Studies curriculum? It's been a nightmare over here in from an IT support standpoint as none of the resources are self-contained.. The trouble is they really like using iWeb it's just really flakey and it's lost students work on several occasions. (missing/corrupt pages - missing resources etc) Are there any alternative easy to use web editors out there for mac that could be used instead? Needs to be more stable than iWeb! Thanks, Martin

I'm using a mac mini server on 10.6 to manage 10.6 clients and I am unable to apply the policy to only show managed printers. The students here still have access to around 8 old printers that they shouldn't have access to any more. Also only some of them are getting the policy to not merge with the users dock so some of them are getting the managed dock merged with the local default dock. Help is appreciated as always! Many thanks, Martin

Yea I tried both domain\username and just username, same permissions error..

I've set up a WebDav share on our Mac Mini Server which is accessible from ipads on the network. The mac mini server is bound to AD. We would like to access the same share from the windows (AD) side using SMB. I have shared the folder out using SMB and given the AD user full permission to the folder. From the windows side it asks for authentication when browsing to the folder. If you put in the AD authentication info it fails saying there is a permissions issue. If you put in an open direction user name / password it connects fine. Is there something that I am missing here? Any help appreiciated. Cheers, Martin

I'm trying to set up a very basic internally managed iPad trolley, we have 16 iPads and a Lion Mac Mini Server. Today was our first install day and I'm stuck with a couple of errors that I get on the iPads when I try to enroll them. I've already gone through various threads and followed a few peoples advice on re-creating Open Directory + certs to no avail. At the moment there are 2 certs that I can use - The first being the one that Profile Manager made when creating Open Directory and the second being a self signed cert that I created manually afterward. I get a different error depending on which cert I use. The auto created OD one comes back with "Invalid Profile" The self signed cert comes back with "The server certificate for "https://nhmacserver01.domainname.co.uk/devicemanagement/api/device/ota_service" is invalid. As I don't have my SSL cert signed by 3rd party I have been installing the "Trust Profile" before Enrolling. I have thoroughly checked DNS and all is okay on that front, is there anything else I could of overlooked here? On the server the auto created OD cert comes up as trusted whereas the self signed one does not so I suspect that the auto created one is the way forward.. I am back on site again tomorrow so can post up any additional details that might give you guys a better idea of where i've got to. Thanks a lot in advance, Martin

Thanks for the replies, i'm in the middle of the domain change this week and can't work on anything until tomorrow but i'll get back to you all on how I get on + what resolves the aforementioned issues. Cheers, Martin

Our Macs are currently integrated with our domain using the "Magic Triangle" configuration with a Mac Mini server for OD. The students here all authenticate with their AD logins and their home drives are mapped using SMB so by default they will save to the network. (No Local Homes) This system does work. However over the year or so that we've had it set up like this, it has been pretty unstable on a few different fronts.. Here's our network; Windows Server 2003 D/C running AD on a ".local" domain **GASP** Mac Mini Server (10.6.8) running OD Cisco Switches + VLANs and gigabit networking throughout. 80 or so Mac Clients (10.6.8) over 5 mac suites. Here's our problems; - Login time. Always been slow, anything up to 3 minutes to log in. After 10.6.8 regularly 3-5 minutes to log in. (Heard this was to do with IPv6??). Been living with this for a while. - Programs crashing out when saving to the network - recently happening a lot! Got a new quirky problem with power point taking 10 mins to save a files unless you "save as" and change the name - after which it will save instantly. Students saving iWeb files are waiting up to 30 minutes for their site to save. - Large files such as indesign documents, fireworks projects, photoshop documents are slow when accessing/editing + crashy when saving. - Losing space on our windows server - Media students are creating large websites on the network + import lots of videos/images taking up a sizeable amount of space on our windows server. What I want to know is if there is a better way of setting this up? Something that I've overlooked? I've been considering setting them back up with local home directories again.. But this then brings up the issue of data not being backed up.. I think students working from the same workstation each time isn't an issue it's just the backing up of the data thats the problem. Over the christmas break our domain is changing from .local to .somethingelse so i'm hoping this will help but I know that the space issue isn't going to change and I'm pretty sure it's still going to be unstable when accessing large files straight off of the network. Does anyone have any light they can shed on the subject? Much appreciated. Regards, Martin

Hi Antonio, The space before media is just to split the text label for the folder so it's called username*space*Media Files. There was probably an easier way of doing this but I'm relativey new to applescript and that part of the script was working okay. Cheers for the link, i'll post up on the apple forum. I think my question can be simplified to "Using an "if not exists" command with a folder on an SMB share" so i'll post it as that. Thanks again, Martin

I've created a script that it supposed to map each user on the network an individual drive that is stored on a windows media server. It does the following; Mount share Create folder on share based on username Map that folder (ie share/username) Unmount share on higher level so user is left with share/username only. Only problem is that my script fails if the folder exists already. So i put an "if not exists" in but it appears to be doing nothing as when i run the script i get back "cannot create folder as it already exisits".. Can anyone point me in the right direction here? I've attached the script below. Thanks in advance! Martin set username to (do shell script "whoami") set Media to " Media Files" mount volume "smb://172.22.8.23/macmedia$" tell application "Finder" if not (exists ("smb://172.22.8.23/macmedia$/" & username as text) & Media as text) then make new folder at "macmedia$" with properties {name:(username as text) & Media as text} end if end tell tell application "Finder" set mnt to ("smb://172.22.8.23/macmedia$/" & username as text) & Media as text try mount volume mnt end try eject "macmedia$" end tell

I'm trying to make what I thought would be a very simple DB... I need a backend table for storing 4 fields of data in a secure and password protected database.. and a front end in a form style in which you can submit data but NOT read any data that has been submitted. I've tried splitting databases but I either get a password error or it lets me see the whole database... Any thoughts? Thanks, Martin

Thanks for that, i've now got the .pac file sorted. Now how do I get the mobile devices to point to it? Sorry for my ignorance, i've never set up an auto proxy before..

I'm after doing the same thing for the ipads here so they can access the exchange server - at the moment there is no way of specifying which local addresses will bypass the proxy so the when the ipads are trying to connect to exchange they hit the proxy and error out. When no proxy is specified they connect no problem. It would be great if I could get some advice on setting up an auto config file to run on a county network as so far i've just let group policy deal with IE proxy settings.. Proxy server is proxy.wsgfl.org.uk port 8080 needs to bypass 172.* Thanks in advance, Martin

Yup I found those.. you can also do the same thing from the manage menu. But when I execute a "Power On" it fails as the clients don't support lights out management.. There must be other schools/businesses out there that have had this issue?

Yea i'm pretty sure there is.. It's just I wouldn't want them auto starting on a regular basis, just for when I need to run updates/install new software remotely i.e half terms/school breaks etc