quaium

Sorry, me again. Having another issue with the OD/AD setup. After setting up the OD/AD server on a Mac Mini. Everything works and looks fine. However, after I restart the system, I get problems loggin into my Active Directory server via Workgroup Manager. When I click on the padlock icon and enter my AD domain admin login I get the following error message "The login information is not valid for this server. The server failed to accept the login information you provided. Check the Name and Password and try to log in again or contact your network administrator". It's driving my crazy, I'm 100% sure I have put in the correct login details and it worked prefectly when I initially set everything up. It just wouldn't work after a restart of the Mac server! Please can some advise me on what to do...

Thanks everyone for their input/advice. It turned out to be a DNS issue. Our AD server wasn't creating the forward and reserve lookups for the mac server. I created these manually and the OD master was created successfully.

I tried setting up the Mac server as a standalone but I still got the same error message when creating an Open Directory master (that's probably because DNS wasn't switched on as a service). If I start up the DNS service on the Mac server will this not conflict with the DNS in Active Directory? Also how would I then setup a static IP address for the server? At the moment I am putting this information during the server setup wizard. As for the time settings, I am pointing that to one of our domain controllers during the server setup, so the time should be correct.

Really need some help on this. I've been testing the OD/AD intergration on atest environment for a while now and everything has worked prefectly. I set up an Open Directory master on a Mac Mini and then binded the server to the test Active Directory. This allowed me to have a dual directory setup, importing users/computers to the Open Directoy from Active Directory to provide Workgroup Manager preferences. Users were able to login with their AD logins and were controlled by WGM settings. Now I have moved on to the real network,things aren't working! I've re-installed the OS X Server software and during setup put in manual IP settings and configured the server manually not selecting any of the options. When the server loads up and I try to create an Open Directory Master I get an error message saying "There was a configuration error when configuring your server as an Open Directory master" The Mac Server binds to AD okay but it's just not letting me create an Open Directory Master. Any ideas on what I need to do? Do I need to configure LDAP on the local macserver or something? If so, how do I do that? Really need some help on this. Just so you know the way I set it all up on the test environment was to first create an Open Directory master and then bind the server to the Active Directoy. Stop Kerberos on the OD server and then Kerberise the OD with the AD realm.

So would that mean clearing these files on all the Macs that we have everytime a user logs on to retain the preferences? That doesn't seem ideal. I haven't checked the ~/Library/Managed Preference folder yet (I will do when I get a chance) but doesn't the fact that the preferences are being applied mean they will be visable in the folder?

"Always"... actually all the preferences are set to "Always"

We've setup up an OD/AD intergration and have now got our Macs on to the network. Workgroup Manager preferences are working well, however, there is a slight problem. Our workgroup Manager setting are not re-applied when a user makes a change. For example, we have the dock set to be positioned at the bottom of the screen. When a user logs in and moves the dock to the left it stays there. Even after the user has logged off and back on again. Is this normal? Or is there a way of stopping this from happening? Even better, is there a way to stop the user changing anything set in Workgroup Manager preferences?

Ok this is strange. I checked the mms console and it appears that the old certificate is in fact there. However, when i add the new certificate I don't get our website address in the "issued to" section like we previously had (instead I get Verisign appear). Is this normal? The other thing is the old certificate only appears to show im the mms console and nowhere else. Not in IIS or on the Gateway Access Management console. Is this normal?

We already have the Citrix Access Gateway Admin Tool installed. Where do we go from there?

Does anyone know how we install a renewed Citrix security certificate on to the CAG? Users can login fine to our Citrix website but when they click on a desktop they get the following error message: SSL Error 70: The server sent an expired security certificate We have the renewed security certificate in a .cer format on one of the Citrix servers. Any help would be great.

I've added the managedclient.app but what do I do next? Most of the items that are configurable don't have any keys to change. I have nothing appear when I click on the triangle to the left of "Once", "Often" and "Always". Do I have to add the keys myself? If so, how do I find out what keys do what?

I'm not only seeing the AD shares but also the Mac Server I have attached to the Network so I can't see how this relates to an Active Directory issue. Even with no permissions the users can still see the server. Yes, users can only "see" other servers but I'd rather not have that on my network. I do still see it as a major flaw, even in an all OD environment, users will still have the ability to go to Finder's "Go > Network" option. And even having the option to control side bar settings isn't 100%, users can just enter the keyboard shortcut or just go to Finder > Preference and unhide these options. So yes, it is a flaw with the way Apple have implemented Workgroup Manager preferences.

The permissions are properly set, I also experimented with removing all permissions and the servers are still visable on the Mac. I can't believe there isn't a simple Workgroup Manager preference for sorting this out. It's a massive flaw in an otherwise excellent and simple OS! I was hoping there might even be some sort of startup script that I could use but searching the net has bought nothing. There must be a way around this, it's the only issue stopping us from implementing this on our live network!

Right, I have managed to get Workgroup Manager computer preferences working on the client Macs now. I needed to add the computer to the members group by clicking on the "..." instead of the "+". Now I just need help on this Shared/Network problem. There must be something out there to stop navigation of the network, especially something as simple as hiding the Network option from the Go menu or even maybe having the items visable but stopping any further navigation... no?

I have managed to setup a "magic triangle" so that our Active Directory users can log on to our Mac systems. This was done by creating an Open Directory Master and then connecting it to Active Directory. Once this was done the client Macs were bound to both the OD and AD. Now, I have a few issues. Users can log in fine. I added them to Workgroup Manager via Accounts > Members and then clicking on + to drag them in from Active Directory. Work Group Manager preference also work well. However, adding a computer in the same way to a Computer Group does not allow for Workgroup Manager preference to be applied. Does anyone know why this is? Am I adding the computers in the correct way? And is there a way to have a computer populate both AD and OD when it is added to the network? Secondly, and a bigger issue, when a user log on to a client Mac and open finder they can see/navigate a number of servers (our AD server, the Mac OD server and an "All" option) under the "Shared" section of the sidebar. I have used a Plist file to hide the "Shared" section but they can still access these servers by going to "Go > Network". Is there a way of removing these servers from Finder? If so, how do I go about doing this? And if there isn't a way of removing the servers how do I stop users navigating deeper in to the server? All permissions are, as far as I know, correct.

We've got the same issue with the Casio XJ-A145 model. The strange thing is within the menu options there is an Auto Keystone on/off but it seems to be grayed out. The support line weren't much help. The fix above works but it would be nice to know why the menu option is grayed out.

Thanks for the suggestions so far guys. I'll be taking a closer look at MEDIAPORTAL and TrilbyTV. As for Clickview we have looked in to that in the past but I think we dismissed it because it didn't let us use our own videos and we could only view what was available as part of the software subscription. Keep the suggestions coming please...

We need to set up a Media Server in the school and I'd like a little advice from people who have already set one up or are looking to set one up. Basically what I'm looking to have is a server which holds all the media content which can then be accessed by our users via an interface which lists all the available videos and maybe even organises them in to categories. These can then be played simply by clicking on the link and streaming the video directly from the server without the need for any downloading. I've looked at a few options such as Windows Media Services, Adobe Flash Media Interactive Server and Unreal Media Server but haven't been able to do what I want with them. The focus for these applications seems to be on streaming media over the Internet but all we want to do is stream the media locally. Another important note is that we would like to be able to stream a number of different media formats like WMV, MOV, FLA, AVI etc. etc. Any advice on this would be greatly appreciated...

Hi guys, I was wondering if anyone could help me with trying to sort out my PSShutdown command. I have a .cmd file that contains the following: D:\shutdown\psshutdown @D:\Shutdown\Computers.txt -f -c -t 120 -n 10 -v 120 -m "Your PC will shutdown in 2 minutes. Please save all work and log off. If you wish to continue working click cancel but please remember to shutdown manually once you have finished." However, the command seems to hang every time it finds a PC that is turned off. Is there something that I can add to the above so that it first checks to see if a PC is on? And then if a PC is off it skips that PC and moves on to the next one on the list? Thanks in advance!

Can't thank you enough Limbo. What you suggested there works just the way we wanted it to work. It's a shame I'd forgotten all about asking you for help because the teacher who went to showcase this to other schools just came back from doing it yesterday and I just noticed this today. Not to worry, the others schools were just as impressed with just capturing and playing back a file instantly. Thanks again.

Limbo - Could you to tell me how I go about doing the 20 second delay thing on a standalone laptop not connected to any network? I am able to encode the live broadcast but can't seem to find a way of watching it via the http address provided at setup or any other way. Could you help me out?

Becuase it's not in a classrooom... it's a sports hall packed with 30 excited kids. The PE teacher needs to have his full attention on the kids and as little interaction with PC/video equipment as possible. For them to film the kids on a camcorder and then view it back is going to be time consuming and "fiddly". We just wanted a simple method, which could be instantly played back on a projector to the entire class.

Thanks for all the suggestions and advice guys but I think I've found the solution with Windows Media Encoder (big thanks to limbo). We're just going to setup the camcorder, get the kids to do their stuff, while their doing that we'll encode the footage to a file with Windows Media Encoder and then instantly play it back in Windows Media Player. No need to touch the camcorder or fiddle about with it, no need for stopping, rewinding and playing the tape and best of all only a few simple button presses required from the teacher.

It is acheivable but with expensive software. I've seen the software Kandel (I think that's what it's called or it could be the company name) in action and it works very well but like I said it's way to expensive!

Delay, as in to view the footage on a projecter screen after it has been recorded without the need to press a button or rewind the tape.