joewb

some data can be made to save remotely, but the apps generally will not like it. We support a lot of schools and generally will redirect Desktop/Documents to the server and leave the rest locally, advising users to save everything to the server share that gets mounted at log in. Anything in Downloads/Pictures etc generally are not critical and if lost can be used to teach the users about saving to the right location.

If you are running Windows server for Mac and aren't 100% sure on your permissions, I'd take a look at Acronis software, it allows the Mac users to connect over AFP which is much less of a headache to manage!

Using an installer that old you likely will not have valid certificates. Try to set the date/time of the Mac back a few years and then run through the process - That should get around the issue for you!

It can be done, but it’s not easy and not designed for an environment where students moved around to different places a lot. You need to have them log in and configure OneDrive by signing in, then have a second script on next login for the redirects. Not too bad if users generally use the same devices in that classroom every time, but a real hassle if they have to login twice every time they use a new device.

How are you mapping the drives? Is this a launch agent/login item in System Prefs or is this managed by an MDM such as Jamf or Profile Manager?

You can deploy the apps via VPP or custom packages, then a separate config profile with the users email (assuming that your MDM can read your AD) to suppress all the annoying pop ups and do most of the sign in for the user. We support a few schools running this, very rarely have issues with licensing. We tend to find students sit in the same places and Microsoft aren’t too hot on the 5 licenses when they are all from the same WAN IP address.

Yes, you are correct that Microsoft recently announced this has now changed, I'll update the original post if possible.

This is suitable for small amounts of devices as it requires manually installing and trusting certificates and then rebounding the devices, but this can be automated if you have a management system in place which is the suggested method for companies/schools with larger Mac estates.

Take a look at Packages, a free app to package apps up and add a post-install script to repair permissions. Makes it a single process and saves remembering to repair permissions if you ever need to rebuild a device. WhiteBox - Packages

Hi All, Just making everyone aware of the changes Microsoft are implementing that will affect Mac devices if they are bound to AD. Microsoft have recently announced that they will depreciate the use of LDAP during a required security update in March 2020. This is to further to the Microsoft Advisory ADV190023 announced in August 2019. Full details of the recent update announcement can be found here. Microsoft will force all traffic over the more secure LDAPS protocol which by default will not be supported by your Apple Mac estate if they are bound to Active Directory.

Are you sure the app has installed in the /Applications folder and not the users ~/Applications folder? Also check the ownership is root:wheel with all users allowed to run it. You can look at chown and chmod commands if you need to tweak these and having issues from the GUI.