Mustang

If you connect your mac to the SAME subnet as the server can you netboot since you have rebuilt it?

You can also netboot from terminal, using this method doesn't require the helpers and will prove if your setup is correct. bless --netboot --server bsdp://10.0.0.1; restart

I know that should work thats why i asked, from the first post is wasn't stated if wizard210 had ever had netboot working.

Can you netboot the mac if its connected to the same switch as the server and in the same vlan as the server?

Maybe you could give us some more information on your network layout, this will help the troubleshooting. From the screenshots above, error1 is expected because of the lack of an ip address etc in error 2. What happens if you run ipconfig /renew from the command prompt? Are you sure you have the correct network card drivers injected in the boot image? If you boot into windows or live linux distro on the same computer in the same network port can you get an ip address? Have you tried another computer?

Not sure what the issue with sysprep is but; Microsofts official deployment recommendations say to use MDT/WDS to deploy straight from the OS WIM file and add applications/updates as needed without creating a syspreped reference image but they also do state that in an education environment creating a reference image maybe quicker due to the number of identical computers

If you set this, users will not be able to search the directory when they want to manually add a printer. To add a printer they will need to know the print server name and printer share name

Even if you do disable the run box, there is nothing stopping the user creating a shortcut to the share

Have you had chance to try the command from my post above?

Can you post the output of "ls -ale /Volumes" from terminal when the user is having the issue.

Sounds like the web server isn't configured properly if your receiving that message. Do you have a link to the guide you followed for server setup? What is the output from a client of /usr/local/munki/managedsoftwareupdate -vvv

I take it you have the web server setup and working? As you have already installed the Munki client you probably don't want to revisit your clients to configure them. So the simplest way to do this create a DNS Cname entry for munki and point it at your web server. so Munki.domain.com = webserver.domain.com Then create a new manifest called site_default and add your catalog to it, then assign flash player as a managed install. Now when the client checks in with the server it will see the site_default manifest and install flash player

What happens if you reboot in between the students logging on? does the problem still exist ?

How many macs in the music lab? What model of Mac? and spec? What version of OS X? What version of Garageband? What speed network, link to the Mac, uplinks and Server What Spec and OS is the server?

How are you licensing Office? There is a big change coming to the licensing that will stop a lot of installs from working if they have been licensed wrongly. What version of the office packages are you running?

Just out of interest what kind of things are you adding to your default profile?

You can do this. If the university networks are all in the same forest and traffic is allowed to pass between domains you should only need to bind to one domain. If the university networks are in separate forests then this is where the fun beings, i think you need to bind to at least one domain and then add someway of looking up information in the other domains. Sorry i can't be more help, its been 10 years since i had this setup.

Too be honest i wouldn't call this an issue, modifying the default profile is totally unsupported by Apple and always has been as far as i am aware. I doubt there will be a fix because in there eyes there isn't an issue. I believe you can modify the sidebar with python or objectiveC

You need to enable Kerberos authentication proxy on your Smoothwall and then set the Macs to point to the Kerberos proxy. Depending on your version of OS X you might just get away with enabling the DHCP WPAD option and let the Macs pick it up. The Smoothwall Cert is not needed for Kerberos authentication, its needed for SSL decryption.

Listen to this guy, he knows what he's talking about and i can't believe he's the only person to recommend the DEP program

Yes this should be possible. I think the Task Sequence step is called "apply group policy packs" Off the top of my head you would do something like this. Create a template on a test machine, export the group policy and place it in your MDT Share and then call the import as part of the Task Sequence.

Think of it this way. You have up to 8 months testing/install time after the update is released, thats a long time. We did a migration of over 2000 clients from XP to 7, Office 2003/2010 to Office 2013, Hardware dependant images to a modular image and pretty much all of the 200 odd applications updated in less than 6 months and we started from scratch. My point is that with Windows 10 the core OS is supposed to stay the same and only features/fixes will be add. You will already have your Group policies, Applications, etc in place and should only have to deal with the new features and anything that breaks within 8 months.

I think you answered your own question in your last paragraph. When we moved to Windows 7 we could see that mandatory profiles were not really supported anymore so we stopped using them then. What do you actually need mandatory profiles for? you can pretty much create a locked down mandatory style profile with group policy / preferences anyway. Mandatory profile also have issues with some cryptography providers/certificates and Microsoft have stated that they will not add support for these providers to mandatory profiles, the Sage Payroll activation and uk HMRC tax website would be examples of these providers that do not work.

Sounds a bit like your trying too many things at once, we need to take things back to basics. Forget removing any of the provisioned apps for now. Do any other machines have trouble with your default domain policy? if so i would fix this first, Microsoft's best practice is to never modify this policy. For the fresh install I would Create 2 new OU's at the root of your domain, place the computer in 1 and a new user in the other, apply no group polices to these OU's.(if you have lots of group polices at the root of your domain you can just block inheritance) Now can you logon/logoff and make sure everything works as expected?? and then repeat this? If yes to above, create a new group policy for the user or the computer settings but not both and link it to the relevant OU. Enable some basic settings in the group policy, reboot the computer and test. Now can you logon/logoff and make sure everything still works as expected and the group policy are settings applied?? and then repeat this?

I agree with the statements above Education and Enterprise will have the same gpo settings What have you tried so far to troubleshoot your issues??