HodgeHi

Its the clients that cause the issue more so than the server, but the server would have the same issue since it is basically Mavericks with an app chucked on top. The issue is seen with a mac client being connected to the AD and the shares on the windows servers, predominantly server 2008r2/2012 (not sure about 2012 r2 but i would take a stab guess that as well). If a mac client is NOT bound to the AD then the problem doesn't arise. However, as soon as that client is bound to the AD the mac client can then edit ACLs in the Get Info pane that it should not have access to. The user gets a warning but the damage occurs anyway. You also don't need to login using AD credentials either. You can log on to the mac as the localadmin, Use connect to Server to mount the share and authenticate as a standard AD user. This also replicates the problem. In 10.9.3 this does not happen in the get info pane, but the creation of Home Dirs continues to fail. This may not sound like a problem, but then how do you create all of the new home dirs for the new Yr7s coming in in September?

I don't think the issue is going to go away to be honest. Apple could develop their implementation further and then tomorrow MS could release an update. the SMB protocol seems to be being developed quite quickly at the moment at MS. Not sure how well the Open Source version of SAMBA is doing with regards to compatibility. You can check the issue by going to a mac client that is bound to the AD, opening the get info pane and changing the ACLs. On 10.9.2 the server-side ACLs will disappear from the list. But they also disappear from the Security tab on the windows server too.

To deploy iPads successfully you need to understand the process. Once you understand and embrace the process then the deployments are made simpler. Firstly you need to understand that iPads were designed with a single user in mind. So that user in effect will be setting it up. So if the user is setting it up then all you need to do is simplify the process for the end user. If you get your back-end in place first, then a mass roll-out should be a breeze. • Get the MDM structure in place, so when a device is enrolled the profiles are sent to the device along with the apps. • Create a wifi network that either allows users to log in with the AD details and then enrols the device e using those details or a guest network that redirects to a login page • When the user logs in to enrol the device, some MDMs (or all?) will create a link between the device and the user (causing them to be the owner in the terms or usage). • With the link created, the email address of the user (if populated in AD) can be used to invite the user to the managed distribution, but this can be done later. • Remember we have enrolled the device. If the enrolment URL used adds the device to a certain group, then the device will be pushed all of the settings. This could also be all of the settings for the internal WiFi, making the WiFi setup now managed by MDM. So if a device is lost and erased, or un-enroled by the end user they lose access to the network. • Additional managed prefs can also be pushed out like exchange account details (user can just enters their username and password) • Finally the managed distributed apps can be pushed once the user has accepted the invite. All of the above hinges on the fact that the user has their own Apple ID.

Mavericks has an issue that cripples ACLs on the server-side, rendering the files inaccessible by the domain admin. To make matters worse if the user account does not have a home directory pre-populated with the mac home dir structure, the mac client will fail to create it also causing the files to be inaccessible but the domain admin. If you're macs are not bound to the AD then the issue is non-existent. Beware of Mavericks when bound to a 20087/2012 server. 10.9.3 also does not resolve the issue.

As far as I'm aware the previous version iWork are kept. They are in the iWork 09 folder in the Applications folder. So you can switch between the 2. There are some nice improvements in the newer versions though and you can see how they are geared for switching between touch and non-touch interfaces. Take a look how you remove and edit hyperlinked text for example.

I would firstly make sure that the users can access the services on the OS X Server. If the mac server is bound to the AD then where the users/groups in AD are found in the server.app, select them and then edit the service access for this group. But before doing any of that, make sure that the mac server is using the AD kerberos realm. If it is then create a test share on the mac server (make sure that it is shared out using SMB) and then set the permissions for owner, group and everyone to read/write. Make sure that the Windows server can actually mount this share by using the start > Run \\ip-of-mac-server\share-name. If everything is working as expected and that you can create folders on the share. Now once this is done, go to the home folder and enter the details. Make sure that you enter the fqdn and share name exactly as it is. It IS case-sensitive. If you enter the details all lower case and the share name is upper and lower you will not be able to log in as the user. Note: the above permissions are for testing only to make sure that you can actually create a home dir folder on the OS X Server. Once you are happy then continue to make the changes until they are locked down to your satisfaction.

Check that you don't have parental controls set for the student account. If profanity filtering is enabled for the account then it stops the welcome screen from appearing.

Hello, We had some Sharp MX-311n copiers that had the capability to scan a document and save it to a USB drive. This proved quite useful over time. Our bursar has recently swapped out all of these machines and replaced them with Sharp MX-5112n and now urgently requires this function. However, I cannot seem to find out how to do it. I have spoken to our supplier who is not sure if these machines have the facility either, and I am still waiting a call back. Does anyone have this machine that knows the process on how you can scan a document and save it to a stick as a PDF file? I think it is called Image Send. I have checked the Operations Manual but cannot find any reference to it, although the manual has been created using flash (WTF?) and is a nightmare to find anything in. Hope you can help. Thanks.

Can the manual install not be done through ARD if they are .pkg files? I would send it out to 1 client, check with another user to test that all is well and then deploy to the rest. I usually always send out my files via ARD. If the app is part of the image, what about separating it form the image and installed afterwards using Deploy Studios built-in post install option? May resolve the issue with the imaging not playing nicely.

To sift through errors in the console, I just click on all messages and then search using the user name that was logged in. I haven't used Sibelius so not sure how it works. If the software is running but has problems, then it would be up to the app to log to the console I think. If the app won't even run then it should be the system to log any problems. But then I'm just telling you what you already know and being no help.. Sorry.

Hello, We have had some mindstorms for a while now and just come round to checking they are ok after standing idle for a while. The screens on them aren't working. However, the blocks themselves are as I can hear the sounds and select things to start programmes etc. I have tried searching online for some eduction resellers but can't seem to find one. Does anyone know where I can purchase some blocks (around 9) for a reasonable price? Thanks.

You shouldn't' need to install, just need to work out the permissions for the files/data. Maybe a chmod -R 777 on the sound files may resolve the issue.

I get these errors when an account has copied items into locations, and then a 2nd account tries to access these locations, such as the Applications folder, library folder, Application Support folder. You will see a no entry sign on the folder if that particular user cannot access it. There aren't any managed preferences on these accounts either, just messed up perms. Also a propagation of permissions doesn't seem to resolve the issue. But yours may be an entirely different problem.

What does the console say? If it is a permissions issue, the console will state that the user has been denied permission to run the app or files.

Mine have arrived. I got them for around £355 per machine, with a free bag, wifi keyboard and mouse. You can register for the 5 year warranty as well, which has been extended until September. I have opened 3 and have an issue with one (hissing noise coming from the sound card). Not sure if I'm just unlucky. Will be unboxing the rest shortly.

As long as you can provide proof of purchase that the Apple cares were purchased within 1 year of the machines that were supposed to be registered with them, I think they will accept it. Call Apple care and ask them. If they will allow it then you could ask for the case number and have a reference for when you get back. I ran into this issue before and IIRC it was out of warranty.

Are there any indications in the event viewer? Or possibly run the group policy results wizard against that computer using that student's account?

As far as im aware WGM shouldn't be used on Lion clients as it can cause further issues. I must admit I have used it on my lion client but only to change settings for the 10.6 machines. I have had issues with WGM not being able to create,edit or change settings. It gives a permissions error. My advice would be to try and steer clear from WGM for lion clients and use the provided profile manager tool

I allow the entire applications folder and then disallow the utilities folder and any other folders that you may wish to remove access to i.e. server admin tools if they are installed.

Have you tried the 10.7.4 update? May help fix the issue. There is mention of improving binding and logging into AD accounts. May have been some small tweaks under the hood for OD as well.

Hello all, I am looking to move my roaming profiles that are currently stored on my Server 2003 HDD over to the Lion Server. This will eventually be moved over to the storage when I work out what to buy. However, I am running into a problem. When I try to log in with my test user, I am greeted with an error saying that it cannot load my roaming profile. The Details say: the request is not supported. I think I have the permissions set correctly. From OS X 10.7, logged in as this user I can mount and access the folder holding my profile on the SMB share. I cannot set the permissions from the Server 2003 box. Is there something that I am missing? TIA.

I vaguely recall reading somewhere, if you have a boot camp installation of Windows XP, parallels can run from that partition. This would allow you to use the native speed of the Boot camp installation when needed (rebooting into Windows), but also give you the option of accessing the data/apps through Parallels when a reboot isn't an option or necessary. Here's a guide on how it works and how to set it up... http://download.parallels.com/desktop/v7/ga/documentation/en_US/Parallels%20Desktop%20User's%20Guide/32733.htm

You may be able to tell what is causing the failure to load by booting into verbose mode. It's either hold down cmd and V or just V on startup. I can never remember which, because they keep changing stuff around

Any retail disc will do the job as long as it is powerpc based. A leopard disc for instance (10.5).

@JR-PCS, You're right about the questions. Let's start off with the simple ones. We only have around 35 macs that would be connected (via AFP) using networked home dirs at one time, but everything runs from here, e.g. Garageband, iMovie. All apps are run across the network. I understand that the switches and connection to them is still a bottleneck. Its more about the IOPS? However, there will be other machines around the school connecting to shares via SMB, currently XP. Documents come from here as well. Our iTunes library will run off this array also streaming content, maybe eventually to iPads, or other wireless devices. The total amount of data isn't a great deal. We have managed with a 1TB raid array for the last 4 years. It rapidly filled up over this year though so additional space would be needed. I'm also considering the fact that this probably won't have any more money thrown at it in my life-time. I'm looking at around 4TB of space. Money available is unknown. It all depends on how much I can save on other purchases. We are buying some new laptops as well which apparently weren't budgeted for as they didn't know about this purchase. Since it was their idea and not mine, I'm not sure how this came about.