HodgeHi

I create folders to group the apps into and then create shortcuts of the apps and put them into these folders. So I have a creative folder, which includes shortcuts for Pxielmator, FramebyFrame, Comic Life etc, Office folder which has the Office 2011 apps, iLife folder etc etc. You can create the folders on your machine locally and then using ARD send them out. You can then use WGM to add them to the dock. Perhaps not what you are after, but you could then remove the My Applications from the dock completely. I don't have it on mine and the kids can access all of the apps they can use right from the dock.

I think I should mention that I have 10 of these things to buy. I don't fancy getting 10 lemons at once

A dell latitude E6320. Not sure if this is their lowest spec machines but it was either this, the precision mobile, which was more or the XPS, which was even more! I didn't see the other set of buttons. I will look again. But the samsung seems like a decent enough machine. I did have a Samsung of my own a while back. The jack on the mainboard broke off twice on mine.

I'm trying to avoid netbooks as these machines will be used for lesson planning and assessment. Some of the templates the staff have to use would mean a lot of scrolling. I am looking at 13.3" to 15.6" screens, but more on the 15.6" side I think. The macbooks that we would have gotten would have been the entry level Macbook Pro models. Dells online prices at the moment are coming in at around £1,284 ex VAT. I assume a school could get these for less? Some of the lower priced machines on the PCWorld Business site look to be lower specced than I would like. I have found a Lenovo ThinkPad Edge 15.6" that may fit the job but the buttons for the track pad seem to be in an odd position, which could take a while to get used to.

OK. Folowing on from this discussion was a meeting with the head. As most of you are probably aware, we are a mac school. ONe of the reasons though for this thread was because the head wants to move some staff from macbooks over to Windows-based laptops to reduce replacement costs, which is fair enough. So the next question is really what windows-based laptop manufacturers are you guys avoiding right now. I've been out of the loop a while with regards to buying this sort of hardware, so not sure which companies are a little unreliable these days. I know in the past Toshiba had issues with their batteries causing their hardware just simply failing to turn on at one point, and the acer machines we have the keyboards seemed very weak and bendy and they failed quite quickly. So what do you guys buy? Personally, I am interested in HP and Lenovos at the moment as both seem to be decent looking and reasonably priced.

You could maybe use Blender to gain access to the 3d modelling and also for the game engine. I don't know what I'm talking about as I haven't a clue, but IIRC the game they released is available to use and tweak. It could maybe allow you to get a grasp of how the system works. There is also a lot of models available for free online as well I think. You could also look at blender cookie for tutorials on how to model characters for games and stuff.

I think it is. It is usually generated from a default file.

Theres also the krb5.keytab file stored in the /etc folder. Just had a look at this file. It looks like the list of services kerberised and the server names associated with them. If you decide to touch any of this file you may want to make a backup first. You may also need to convert it to an XML file first as well.

fizz is our OD Master (XServe). Fizz is connected to our AD in a Magic Triangle setup. All of the services are kerberised using the AD realm. Having just gone through my entire klist again, I don't have a single entry that has the OD Master realm. This server was built using 10.5 and upgraded in place to 10.6 and is not residing on 10.6.8. If you have to demote the OD master, it's not too bad to rebuild. The hardest part is reconfiguring the managed preferences if theres a good number of them. The users are easy as you will be pulling in the users from the AD and so the UIDs will be the same. The OD groups and any OD users can be imported back in once the server has been re-installed. Just use the WGM tool to export the users and groups. Make sure that any other items that have been configured are either backed up or noted so that these changes can be re-done. Edit: Klist -kt will only show the data for the machine it has been run on as far as I'm aware, which is why i was a little confused over yours but you edited the post with new info.

Is your DNS all A OK? There seems to be a few different hostnames in the list and also 2 realms. If you take a look at the one I posted up, you can see that it is a single hostname, fizz.eatonvalley.sandwell.sch.uk with a single kerberos realm @EATONVALLEY.SANDWELL.SCH.UK. This is also the name of the domain. The only way I know of getting this back to how it should be is demoting the server to a stand-alone server and then re-promoting. You may need to remove a kerberos file but I can't recall which one, either the krb5.keytab file or the edu.mit.kerberos file. If you back up your groups and users in WGM you back re-import them afterwards. However, you may need to re-create the managed preferences. These are backed up using server admin but this would also backup the possibly messed up kerberos DB/LDAP DB etc.

Also if you check server admin and then the Overview of the OD service, Kerberos should be stopped. This is because if the server has used the kerberos realm of the AD server then it won't start ther kerberos service as it hasn't got it's own DB or something like that. If the kerberos service is running then this may indicate that the OD master has kerberised the services with it's own REALM. I don't know if this is causing your problem but it may cause issues with authentication if it was using 2 realms.

Whats the output from the OD Master? Some services that are kerberised using the LKDC will have a long UID after the @ symbol, such as the AFP service.

Most of you have said what I think would be the best way to do this. I think the local iCloud server is the best solution along with a process to push stuff out to devices. While we are at it can we stick a local facetime/messages service on there as well.

The last post in the Apple discussion thread you mentioned is an interesting one. Have you got CS5 installed on any of your macs? Could you remove a copy off one and se if the results are the same, or have you already tried a fresh install of just the OS with the combo update? Also just reading your last post regarding the klist. You say they all have the FQDN of the mac. Is this the mac server? I almost certain that if your services are kerberised by the AD then they should have the AD REALM after the service name. Mac Servers tend to add the server name at the beginning of the REALM name like server.example.com instead of just example.com. Here's a list of my services, kerberised by the AD. 72 05/14/12 14:42:41 imap/[email protected] 72 05/14/12 14:42:41 xmpp/[email protected] 72 05/14/12 14:42:41 fcsvr/[email protected] 72 05/14/12 14:42:41 http/[email protected] 72 05/14/12 14:42:41 ftp/[email protected] 72 05/14/12 14:42:41 afpserver/[email protected] 72 05/14/12 14:42:41 afpserver/[email protected] 72 05/14/12 14:42:41 afpserver/[email protected] 72 05/14/12 14:42:41 smtp/[email protected] 72 05/14/12 14:42:41 host/[email protected] 72 05/14/12 14:42:41 host/[email protected] 72 05/14/12 14:42:41 ipp/[email protected] 72 05/14/12 14:42:41 xgrid/[email protected] 72 05/14/12 14:42:41 xgrid/[email protected] 72 05/14/12 14:42:41 xgrid/[email protected] 72 05/14/12 14:42:41 vpn/[email protected] 72 05/14/12 14:42:41 vnc/[email protected] 72 05/14/12 14:42:41 nfs/[email protected] 72 05/14/12 14:42:41 nfs/[email protected] 72 05/14/12 14:42:41 vpn/[email protected] 72 05/14/12 14:42:41 pop/[email protected] 72 05/14/12 14:42:41 ldap/[email protected] 72 05/14/12 14:42:41 ldap/[email protected] 72 05/14/12 14:42:41 ldap/[email protected] 72 05/14/12 14:42:41 HTTP/[email protected] 72 05/14/12 14:42:41 HTTP/[email protected] 72 05/14/12 14:42:41 HTTP/[email protected] 72 05/14/12 14:42:41 cifs/[email protected] 72 05/14/12 14:42:41 cifs/[email protected] 72 05/14/12 14:42:41 cifs/[email protected] 72 05/14/12 14:42:41 pop/[email protected] 72 05/14/12 14:42:41 nfs/[email protected] 73 05/28/12 14:25:35 ipp/[email protected] 73 05/28/12 14:25:35 vnc/[email protected] 72 05/14/12 14:42:41 pop/[email protected] 73 05/28/12 14:25:35 vnc/[email protected] 72 05/14/12 14:42:41 pcast/[email protected] 72 05/14/12 14:42:41 pcast/[email protected] 72 05/14/12 14:42:41 pcast/[email protected] 72 05/14/12 14:42:41 XMPP/[email protected] 72 05/14/12 14:42:41 XMPP/[email protected] 72 05/14/12 14:42:41 XMPP/[email protected] 73 05/28/12 14:25:35 imap/[email protected] 73 05/28/12 14:25:35 xmpp/[email protected] 73 05/28/12 14:25:35 fcsvr/[email protected] 73 05/28/12 14:25:35 http/[email protected] 73 05/28/12 14:25:35 ftp/[email protected] 73 05/28/12 14:25:35 afpserver/[email protected] 73 05/28/12 14:25:35 afpserver/[email protected] 73 05/28/12 14:25:35 afpserver/[email protected] 73 05/28/12 14:25:35 smtp/[email protected] 73 05/28/12 14:25:35 host/[email protected] 73 05/28/12 14:25:35 host/[email protected] 73 05/28/12 14:25:35 host/[email protected] 73 05/28/12 14:25:35 ipp/[email protected] 73 05/28/12 14:25:35 vpn/[email protected] 73 05/28/12 14:25:35 xgrid/[email protected] 73 05/28/12 14:25:35 xgrid/[email protected] 73 05/28/12 14:25:35 xgrid/[email protected] 73 05/28/12 14:25:35 vpn/[email protected] 73 05/28/12 14:25:35 vnc/[email protected] 73 05/28/12 14:25:35 nfs/[email protected] 73 05/28/12 14:25:35 nfs/[email protected] 73 05/28/12 14:25:35 vpn/[email protected] 73 05/28/12 14:25:35 pop/[email protected] 73 05/28/12 14:25:35 ldap/[email protected] 73 05/28/12 14:25:35 ldap/[email protected] 73 05/28/12 14:25:35 ldap/[email protected] 73 05/28/12 14:25:35 HTTP/[email protected] 73 05/28/12 14:25:35 HTTP/[email protected] 73 05/28/12 14:25:35 HTTP/[email protected] 73 05/28/12 14:25:35 cifs/[email protected] 73 05/28/12 14:25:35 cifs/[email protected] 73 05/28/12 14:25:35 cifs/[email protected] 73 05/28/12 14:25:35 pop/[email protected] 73 05/28/12 14:25:35 nfs/[email protected] 73 05/28/12 14:25:35 pop/[email protected] 73 05/28/12 14:25:35 pcast/[email protected] 73 05/28/12 14:25:35 pcast/[email protected] 73 05/28/12 14:25:35 pcast/[email protected] 73 05/28/12 14:25:35 XMPP/[email protected] 73 05/28/12 14:25:35 XMPP/[email protected] 73 05/28/12 14:25:35 XMPP/[email protected]

The change probably came with Server 2008 using an updated SMB2 protocol. Lion Server is the only one that I know of that was released with support for this. I am using server 2003 across all of our servers and share out using both SMB and AFP. Is it possible to use AFP instead or are your shares on the windows server? The kerberising of the services is done on the server. Edit: I have just found an article that shows how to disable SMB2 signing. Could this help? http://www.petri.co.il/how-to-disable-smb-2-on-windows-vista-or-server-2008.htm

The command to kerberise all the services is sudo dsconfigad -enablesso

Laptops also require the battery to be removed as well.

Also is this of any use? https://discussions.apple.com/thread/2441020?start=0&tstart=0 It seems to mention that the NFS service is being used to access home dirs, using Kerberos authentication. As your 2nd error is stating that your server is not is the kerberos Database, this could be your problem. If your users are set for any auth type it may be looking for kerberos and then falling back to the next auth type. You could possibly try to re-kerberise your services. Also if it is a AD-OD system, ensure that kerberos is not running on your OD. I think you have been through the klsit -kt commands before but if not then you could take a look at the results of that to see (if you are using NFS) that the service is kerberised. If it doesn't have the FQDN domain listed then you may need to kerberise the service again.

You could also try resetting the SMC. This differs from machine to machine so you would need to find out on Apple's pages what the process is for yours.

You could use this combo update package that would go from 10.6.5 to 10.6.8 in one go.

Also check the SMART status of the drive. I had one where the mac partition wouldn't boot but windows would. Replacing the HDD sorted it out.

The newer macs have diagnostic boot up now built into the EFI firmware. Just hold down D on startup.

IIRC when I was looking at it at home i found that if the server had a cname record in it's dns then the web-based services wouldn't work correctly. This was when 10.7 server was first released though, and I may be getting confused with the Apache/WiKi/other non-working services.

I think the service goes out to apple' servers to obtain a cert. Maybe it is a proxy or port issue. Just found this site: Apple - Support - Lion Server - Profile Manager Not sure if there is any info here that may help.

upgrade of the SSD drives in them may be awkward as well as pricey. It isn't a simple SSD drive in the macbook airs so if capacity could become an issue then you may want to price up the hardware beforehand