davidacland

Hi @AliG A full guide would be a bit tricky here but to get you started, we use rsync in a script to do the sync. This can be quite difficult to get just right so if you want it simpler, you could try out the standard home directory sync feature in OS X. We personally don't use it as there are a few bugs, but if you're not too keen on scripting or terminal commands then it will probably be your only option.

I'm a fan of AirServer but might have to give Mirroring360 a go. There's definitely a use case for these tools so teachers can present their iPad screen on the projectors. Going the other way I've tried a bunch of remote desktop apps like Splashtop and solutions from Microsoft and Citrix. The user experience is poor at best and not really playing to the iPad's strengths. Its just turning it into a (not very effective) netbook.

Sounds good. This is the same route we've taken for client sites that were using deep freeze. We always found DF too heavy handed and an extra burden when it came to patch management etc. The only extra exception we had to include (in some cases) were specialist labs that were leaving Mac Pros doing rendering jobs etc. In those cases we only set the data to delete once per week. Regarding profiles and profile manager, it might be worth trying the newest version of Munki instead. PM is a bit unstable and could cause more problems than it solves.

We normally use Sophos at our sites, in some cases we use McAfee as an alternative. No major issues with either of them

Hi, The Mac translates the \ into / automatically. A ? in the dock is quite common as the dock can load before the Mac has had a chance to connect to the network share. We normally mount the share via a login script instead and add to the dock using dockutil.

Hi, This is an on-going issue with 10.10 Macs, normally when connected to an LDAP service like AD. There are a bunch of semi-successful responses here: https://jamfnation.jamfsoftware.com/discussion.html?id=12589

Hi, I'm a bit late to the conversation but thought I'd chime in. I've setup similar solutions for a few hundred schools over the past couple of years. Unchecking the "force local home directory on startup disk" option sets the Mac to use the SMBHome attribute as the network home so no data is stored locally. This configuration would be great if it worked, but generally its slow and unstable. Leaving the option ticked and using mobile home syncing gets around the performance issue but is also quite unstable as Apple's implementation of home syncing isn't very reliable. The most stable setup is how you had it configured initial, local homes, mounting the users network home on the desktop and dock. This requires the user to copy any important files to the server before logging off. We have a home syncing solution built- in-house but this took several years to develop and isn't something we would recommend unless you have a lot of free time!

The process all sounds ok. I normally prefer to do a clean install and migrate services and data to it though. Usually has less issues that way. David Acland - Amsys

They've been deprecated but do still work. The main benefit of using LaunchD is the ability to add multiple items to the /Library/LaunchAgents folder. The login window preference file is an xml key/value pair and can only hold one entry. The main risk of using login hooks is that Apple actually pull the functionality completely, breaking some of your setup.

I'm not sure what role the Mac server is playing in the setup. Are the Macs joined directly to AD or are they using OD on the Mac server? It sounds like a networking issue, particularly as you mention that plugging in the old box again lets the Macs login. The first step on a Mac client will be to test if you can reach the domain controller. You can use "ping domain.controller.address" in the Terminal on an OS X client to see if the DC is reachable. On the Mac server, depending on the services its running they can be a lot more fragile than Windows servers, particularly regarding IP address changes. If it is configured with a standard school setup, it is probably running Open Directory and either Workgroup Manager or Profile Manager. The Open Directory service is particularly sensitive to IP changes, name changes, DNS record changes etc so it may be broken if these have been edited. Depending on the overall issue there could be a huge number of troubleshooting steps to go through. You might want to consider getting some Mac experienced help in if it is causing big problems for your users. David Acland - Amsys

Hi, If any of the devices are desktops (iMacs and Mac Minis), I would recommend using Ethernet. 802.1x WiFi on OS X is often troublesome. For those that must use WiFi, the first thing to determine is whether it is struggling to get a stable network connection or a stable connection to the AD domain controller. When you have one that is failing to login as an AD user, login as the local admin, test connectivity to other network services (file server etc) and see if you can browse AD at all (you can use dscl in the Terminal). If you can connect to other network services but not join AD, it would indicate that the network connection is OK and you need to troubleshoot the connection to the AD DC.

Last time I tried using Munki with IIS was about 2 years ago. It wasn't good. Apache will install and run under Windows, it just requires a high hardware spec and is noticeably slower than Linux.

If its 10.9 or 10.0 I would set those with configuration profiles. If you do a search on github you will probably find some that have already been created.

I would personally go for a Linux/UNIX server if you can. Apache on Windows has a habit of under performing. If its of any use we've just updated our blog on Munki 2, although a lot of our Munki 1 articles are still relevant... Munki 2: Upgrading Your Munki Repo and Administration Mac

This is usually just a system or network account so you can reset using System preferences or Active Directory Users & Computers (if you're tying it into AD). Not sure what DS app you can't get into though, is it the Admin console or the runtime? David Acland - Amsys