HodgeHi

Here's the screen grabs of mine:

Click the disclosure triangle next to the tick box by Inheritance. This will expand the selection.

I have just had a look at this... Go to File Sharing and create a sharepoint. Change the Everyone Else permission to no access. Once the sharepoint is created go to the Hardware section, click on the server and then click on Storage. Under the storage find your shared folder and then click on the cog below. Click Edit Permissions. The permissions I have used are: Everyone Group: Read, Write, Inheritance, just This folder only is ticked. Creator Owner Group (to find this user just type Owner): Read, Write, Full inheritance (all boxes ticked). See if this works for you.

you probably want Creator Owner rights. Are you using Lion Server or 10.6 in an AD-OD setup?

Hi all, I'm a little stuck with where to go next for my storage requirements. I have little money to play with but need to start looking at replacing the XRAID that currently holds all of our data. I am also looking forward to the future where there is no XServe. I have already invested in the new mac mini with thunderbolt connectivity. My theory is this: I was thinking of using the 10Gb connection between a 2Big drive set and coupling that with another 2Big drive, then using Apple's disk util, create a raid-1. This in theory would provide the bandwidth for the data, whilst providing redundancy. I was then thinking that using the Thunderbolt - 1Gb ethernet adaptor and then teaming the 2 ethernets together would give me a decent connection to the Mac Mini. The mini already has an SSD drive which the OS runs on. At present the XRAID runs on ATA100/133 drives and is connected to the XServe via a 4Gb Fiber Channel card. The XServe has it's 2 Ethernet ports teamed giving a 2Gb connection to the switch. My main concern is providing enough bandwidth for our mac users. They connect using networked home dirs. I am not sure about the LaCie's ability to serve up the data quick enough, but also concerned about their failure rate (but they now have a 3yr warranty), plus the non-standard power supply (would like to connect to the UPS). I have asked for a loan to put them on trial. So my question really is, is there a reasonable alternative to my proposal. I have looked at Drobo, but they can be slow, Promise which requires propriety caddies (something else I am trying to avoid) and a couple other devices. Nothing really seems to provide the connectivity speed that Thunderbolt provides for the same sort of money the 2Big is priced at. Sorry for the long post. Just wanted to get everything out there. TIA.

There may be other ways. A defaults write a plist file/augmented record. The info may sit in the Schema though which would be the reason the info is reset afterwards on refresh. A possible AD schema extension (if you can find the right bit to hold this data) may be possible too?

If these are windows users then I'm not sure how you would do this for each user anyway as it won't be able to save the setting. After checking my my account just after refreshing the changes made, the the checkbox is just re-ticked. If you are changing the setting for OD users you should be able to select multiple users and then toggling the setting like that. In theory if the setting is just a plist file you may be able to push it out via WGM as a managed preference. Seeing as it is in the accounts section though, this may not be possible.

Any disc supplied with an Apple machine will only run on that machine/model. However, you may be able edit the plist file that the machine uses, to tell it to run on the imac model that you have. osx - Install Mac OS X 10.6 on MacBookPro 4.1 - Super User Fo the model of your iMac use the system profile to find the iMac x,x

I was just thinking that if localzuk had already built his image and deployed already and this isn't a task for the 6 weeks then it may be easier to just deploy the package to the required machines and leave them going, but both methods work just as well

Does it come in a .pkg format? If so and you know where the plist (if it uses a plist) file is for the configuration is it possible to deploy via ARD?

I've done it here for a copier. One for Pupils and one for Staff. I then use these print queues and manage them differently using PaperCut. Not had a problem so far.

Yes, you are right. Lion uses Heimdal as opposed to the MIT kerberos. However, the point I probably managed to hide in my post is that lion server will kerberise depending on the Directory Services list order. Take for example, the OD REALM is OD.EXAMPLE.COM and the AD is EXAMPLE.COM. If the AD is first in the list then the realm used would be EXAMPLE.COM. But if the OD server was first in the list the realm used would be OD.EXAMPLE.COM. Try it and see if you get the same results. Switch the list order around and then run the kinit AD username and see the results. If the OD server is first the cache would be empty and the realm would be the OD one.

If you have a Lion installer, I would perhaps just roll out Lion or stay where you are at (10.6.8)? Do you need to move up to Lion?

Apple - Upgrade your Mac to OS X Mountain Lion.

All updates been applied? There was a recent update to Outlook 2011 which caused issues with the Outlook Db and then so another was released to resolve this.

Hello, Just a heads up really. I ran into a slight issue when trying to configure Lion Server as a home dir for my windows users. I eventually sorted this out (which is another thread). Whilst trying to resolve this issue though I came across something that I think is slightly different in Lion Server than 10.6. The order in which you list the directory bindings does seem to have an effect on things, most importantly the kerberos realm. While the OD server was listed first, the REALM being used was the ODSERVER.REALM.COM rather than the AD's REALM.COM. When running the kinit command the server had no cached credentials for AD users (had no OD users to test). When changing the order to AD first, the server then cached the credentials as expected for AD users but also used the AD REALM.COM. It seems that depending on which server is in the list first, directly impacts which kerberos realm is going to be used. It can change on the fly too without any reboots/terminal commands. I don't think this was the case in 10.6

Mountain Lion can be upgraded directly from 10.6 Snow leopard so won't need Lion. However, I would purchase the mountain lion when available and deploy Lion anyway. It's not my fault that I cannot choose what version of the OS I want. If I wish to run a previous version and purchase the latest, surely that would be my decision. I am still licensed after all? Apple's licensing is becoming a real problem for users not wishing to run with the latest version. I don't want to update to Lion as "versioning" would be just too much to teach to staff let alone the kids. And to have the software keep moaning about versioning not being supported on the volume would annoy everyone greatly.

I think I'm going to take a punt at this one: Samsung Series 3 300E - 15.6" - Core i3 2350M - Windows 7 Professional 64-bit - 6 GB RAM - 750 GB HDD NP300E5A-A0LUK | PC World Business for all your IT needs Everything seems to point to it being a reasonably decent laptop. Reading a review online it seems capable of what it will be used for, Office, ActivInspire (it will be used to drive the IWB in the class) etc.

I was barking up the wrong tree. For some unknown reason to Apple, Service Access Control Lists are still managed in Server Admin whereas the access to the File Sharing tools is found in the Server.app. I added the admin users and groups to the list along with my user account. However, when trying to access the share on the lion server I was getting errors returned. Everything seemed to point to permissions/access rights but I couldn't work out where. After removing SACLs on the AFP and SMB (just the smb service might suffice) I can now access the share on the Lion server. So it's either the SACLs aren't working properly or the account information was incorrect on the SACLs. I added the domain admins group to the list though so surely that should have been enough?

I use RemoterVNC to control all of my machines at home. It allows you to configure the connection and then save it. It is then a simple tap to connect. Also allows connection to Windows Servers. The paid for version allows for the following connection types: VNC/Screensharing VNC over SSH Telnet RDP RDP over SSH ARD

Server Admin and Active Monitor may provide you with the tools to understand what is going on. Look at the overview of the data coming (network throughput) and check the disk IO activity in Activity Monitor. If the IO is high but the throughput is low then would this lead you to suspect the disks are too slow? Also what version is the server on and what are the sharepoints? AFP/SMB

Sonnet Online Store If you could use a USB3 card such as the one above you could possibly move over to the external accounts option. This would allow all users to be able to access any of the machines at any time while also keeping their data with them at all times. They could back up to the server by mounting their networked home dirs and copying up anything they wish to keep. The network would need to be quick though so as to remove any waiting around time, if backing up large files. How external accounts work with networked accounts though I'm not sure, but you could do some testing.

Ok. So moving on from this issue onto another. Has anyone had any issues accessing an SMB share on a lion server from a Server 2003 box? I keep getting errors like: From a lion client the share is fine when accessed by a domain admin user. From a Windows 7 client the share is accessible. I have yet to try a 10.6 client or win XP. I'm thinking it's a SMB2 issue. Any thoughts?

Scratch the above post. I have just found this article: Setting permissions using Server.app It seems that instead of using the file sharing tab now, you need to click on the server listed under hardware in the left side-bar and the click the Storage tab. Once here using the disclosure triangles, drill down to the folder you wish to change permissions on. Then click on the cog below and choose edit permissions. Then using the tick boxes for each of the permissions (read only, write only etc) you can turn them on/off. You can also proper gate them here too. A bit confusing to say the least. This may also be of use. http://docs.info.apple.com/article.html?path=Server/10.7/en/c_AccessControlEntries.html]How Server.app propagates permissions

Hello all, Just wondering if anyone has done this yet? I need to start moving our home dirs over to the new 10.7 server we have just gotten. Our XRAID is now getting on and filling up fast. I have started to look into how well the mac mini server can serve up home dirs. But I have come to a bit of a stumbling block on how to use the new (and much crappy) server.app to manage ACLS on the home dirs. it seems that once you create a share and change the permissions they are proper gated down. This means that once I copy over an existing home the permissions all get messed up. I suppose I could use terminal/bash to do the job and rectify the perms issue but is there a way to manage ACLs in Lion Server? TIA