HodgeHi

The biggest issue with Windows integration from the OS X side of things is that they can see shares that are usually hidden from Windows clients, eg the netlogon and the sysvol shares. These are important for AD since they can hold scripts, GPOs etc. Obviously having the permissions set correctly on these makes the visibility of them a non-issue but most admins i think don't like users being able to see them. I for one don't like users to see them. The same goes for the SIMS share. I am not too familiar on the permissions needed for this share and the guys who set this up gave everyone read/write perms. Obviously if OS X users (pupils) can see this share then there could be trouble

Tell me about it Also when it comes to adding plists to the managed preferences try the always first if you want it always managed, but if this fails, move to often. This will allow users to change some the setting if they have access to it but it will default back to the managed setting when they log back in. An good example of this would be the sidebar.plist file. It will still let users change the settings even when set to always manage. I don't know if the change reverts back after the users log out and back in. I do know that often managed does work.

Here's what i do. Map P: to \\servername\Apps on the server. Create a folder in there called icons. Hide this folder and give the users read only access. Create a shortcut to the application (which should now point to P:\application\application.exe. Now place this in the desired loation on your re-directed desktop. Now right-click on your shortcut for the application and click change icon. Go to your p: and choose the icon from your hidden folder that you want. Because the users map p to the apps folder and they have access to the share then they will see the new icons. Hope this helps.

Have you seen the performance specs for the server and what hardware they run them on? Hardly standard industry level specs are they?

Should it not read august 28th?

If i needed to change an icon for a folder i tended to stick them inside the folder whose icon i was changing then made them hidden. The users didn't have access to unhide them anyway.

The sharepoints are on the OD which is the UserHomes folder. I was going to use the UserHomes folder to store both the Staff and Pupils as opposed to last year where i had a separate share point for staff and pupils. I started experiencing the issue that you mentioned in another thread where if a student logged on and then off, a member of staff (mounting a different share-point) could not log on until the system was restarted. I thought doing it this way would alleviate the problem since they were all in one location. We only have around 250 users in total. We are using AD for users accounts and the way i am setting it up is to have the Home dirs stored on the OS X Server, with Active directory redirecting the XP docs into the Home dir docs on the OS X Server thus merging to 2 together. Their XP profiles are stored on the AD Server, mandatory for Pupils and roaming for Staff. This is how i had it last year. The only issue i had with this was AFP losing files

They were in a folder called UserHomes. I will re-create the folder with share permissions and post those... Last login: Mon Aug 24 13:57:56 on ttys000 OD_server:~ admin$ ls -la /Volumes/Data total 3559008 drwxrwxr-x 16 admin staff 612 Aug 24 14:56 . drwxrwxrwt@ 4 root admin 136 Aug 24 14:54 .. -rw-rw-r--@ 1 admin staff 12292 Aug 24 14:56 .DS_Store drwx------ 3 root staff 102 Aug 24 13:04 .Spotlight-V100 d-wx-wx-wt 3 root staff 102 Aug 24 12:44 .Trashes drwx------ 6 root staff 204 Aug 24 12:44 .fseventsd drwxrwxr-x+ 9 admin staff 306 Aug 19 11:19 ComputerImages drwxr-xr-x@ 4 admin staff 136 Aug 17 17:08 DeployStudioServer_v1.0rc13 -rw-r--r--@ 1 admin staff 1026122687 Aug 5 17:53 MacOSXServerUpdCombo10.5.8.dmg -rw-r--r--@ 1 admin staff 796055279 Aug 13 01:00 MacOSXUpdCombo10.5.8.dmg [b]drwxrwxr-x 3 admin staff 102 Aug 24 14:55 UserHomes[/b] -rwxrwxrwx@ 1 admin staff 1055 Aug 17 17:03 Users.command -rw------- 1 admin staff 925 Aug 18 08:39 com.apple.desktop.plist -rwx------@ 1 admin staff 272 Aug 21 13:05 re-create_userdir.sh OD_server:~ admin$ This is the XRAID currently. The folder UserHomes is the shared folder for auto-mounting.

Here's what i have after a re-format of the XRAID array: OD_server:~ admin$ ls -la /Volumes/Data total 2004192 drwxrwxr-x 13 admin staff 510 Aug 24 11:01 . drwxrwxrwt@ 4 root admin 136 Aug 24 12:44 .. -rw-rw-r--@ 1 admin staff 6148 Aug 24 12:45 .DS_Store d-wx-wx-wt 3 root staff 102 Aug 24 12:44 .Trashes drwx------ 6 root staff 204 Aug 24 12:44 .fseventsd drwxrwxr-x+ 9 admin staff 306 Aug 19 11:19 ComputerImages drwxr-xr-x@ 4 admin staff 136 Aug 17 17:08 DeployStudioServer_v1.0rc13 -rw-r--r--@ 1 admin staff 1026122687 Aug 5 17:53 MacOSXServerUpdCombo10.5.8.dmg -rwxrwxrwx@ 1 admin staff 1055 Aug 17 17:03 Users.command -rw------- 1 admin staff 925 Aug 18 08:39 com.apple.desktop.plist -rwx------@ 1 admin staff 272 Aug 21 13:05 re-create_userdir.sh OD_server:~ admin$

So i tested SMB for the protocol to mount the home shares instead of AFP. I was presented with an error stating that the Home dir was deleted or access in denied. I checked to see what was happening and for some reason i had to authenticate to get access to the home dir. S it seems that kerberos isn't working for SMB but it does work for AFP????? I think i'm about to jump off a bridge

I have since re-installed Leopard server on a test bench mac mini. The version was 10.5.4. I went through the AD-OD paper as i have done before. I used an OS X 10.5.8 client, a server 2003 r2 server (installed natively on another mac-mini) and also an XP sp3 client (also installed natively on a mac-mini). Now, the AD-OD paper used a share called homes$ on the AD Server and a share called homes on the OD Server, shared using AFP. The outcome was that logging in was still slow compared to when i used 10.5.0 -10.5.7. I also had some issues when trying to access the shares. Permissions related i think, and also when logging into the OS X Client for the first time, it keeps adding everyone deny ACLs to some of the folders. This never happened before. I also found that i needed to start SMB service before i could change the home folder path in Server 2003 for he users. It does not say this in the AD-OD paper but i can't recall having an issue before? So still at the starting line. I just need to test SMB now...

So the root of the XRAID should be something like rwxr-xr-x? I am completely unsure about how the permissions should be in all honesty. I had a fully working system before and now all hell has broken lose since i rebuilt the XRAID and finding information on the process to build a RAID array is near impossible to find i.e. do you use terminal with sudo or disk util under an admin account or should you use root's? I managed to get it half-working at one point but finder took around 2-3 minutes to load. I think this also to do with permissions but things seem to work ok after everything loads. i gave the AD user posix permissions for their home dir and chmodded them to 700. Is this the norm? Hope you can help and thanks for the info given already. I will check the permissions on the XRAID o Monday.

Good morning, I have been having numerous issues over the last 3 weeks or so. I would write it all down here but instead could i refer you to this thread where i have already done so: Apple - Support - Discussions - AD Users auth Ok but cannot log into ... Hope someone can help me here or even confirm that they are experiencing similar issues so i know i am not going insane. Thanks, Mark.

@GJE What font is that that you have used on your blackboard image? I like it very much

Have you witnessed this issue as well? I assume that the volume Home that can be seen in Server admin's (another dire example of Programming) file sharing pane is the one that you refer to.

personal opinion doesn't come into it really. Is anyone going to argue that a ferrari is the same as a Punto? Admittedly at the end of the day its just a car but the differences are what they can do.

Hello, I was wondering if someone with access to an AD-OD environment could check out something for me. I have created a share in OS X Server which is called Homes. Now the AD Server cannot see this share even though i have given the admin user full control via ACLs. As soon as i unshare the folder and then change the name to something else like UserHomes and share it using this name, it works fine, no probs. Is there something in SAMBA that requires the homes share name and thus clients can't see the share? I don't understand why Windows cannot see this share name? TIA, Mark.

Apparently the big music companies are trying to remove some of the control that the iTunes store has over the music industry and as a result when amazon and the likes got their DRM free music they got the deal for a lot less than they would give it to Apple. Also Apple have never stated that they would enter the netbook market and if they did it wouldn't be a budget machine. Netbooks are funny things. The scheme "a laptop for every child" spurred the idea to create a sub-£100 machine and then netbooks all popped up trying to be the cheapest thing around. I have the HP mini note and to be honest i don't use it that much. I find it awkward and fiddly to use. The screen is generally too small really for anything, and the speed ain't the best either. The battery is shockingly bad In the end you get what you pay for. Give me my Macbook pro any day. May be expensive but it does everything i need it to and is always ready when i need it (straight from sleep)

my advice would be to follow through the AD-OD pdf linked in the sticky tread at the top of this forum. When that fails but you understand that you did everything to the letter then come here and ask for some clarification...like i am about to do now

Until the fans kick in! And the fact that it takes quite a bit of time to copy them over. I just want to buy the game, get it home and shove it in eagerly awaiting what is about to take place.

After using my xbox elite and trying to hear what i was playing, there is no way i would play games on a mac pro, if my G5 is anything to go by. Don't get me wrong its a good machine but i bet the thing gets loud when its working hard. I can't play games until late at night (when i can actually get on it after my son goes to bed)

I don't think you can assign preferences to AD computers. In the Computer groups you would put OS X Clients (mac computers). This allows you to manage OS X Clients using WGM.

Could i ask why you do this? Just never heard of this one done before.

I think it's got a little confusing between you guys. Its a little straight forward really. Snow Leopard will be released in US for $29. How much that will translate to in £ is yet to be seen If you purchase a mac after a certain date then it will be for cost of P & P. Snow Leopard is said to be Intel only. If you don't currently run Leopard you will have to purchase Snow leopard at full price. You can also purchase a mac box set that updates iLife, iWork and Leopard to Snow leopard according to Amazon's pre-order page. This is how i understand things.

That's more or less what is happening now through the likes of Xbox live and PS3 store. The biggest examples are the first person shooters. Admittedly it is only for the online multiplayer action but it is still happening. If they expanded it to the actual games then it could potentially be good but only if the creators/publishers price them reasonably. For example Gran Turismo 5 was rumored to be a bolt-on type of game with the initial purchase only carrying around 5 tracks and about 12 cars. It was estimated that to play the entire game it was going to cost around £1200. I haven't heard if this is indeed still going to happen this way. So IMO it can work but only depending on how it is implemented for each type of game. I'm not really willing to pay that sort of money to play a game.