Search the Community
Showing results for tags 'osx'.
Found 22 results
-
Wotcha folks - am having issues with a pile of iMacs and wondered if any of you could shed some light. We have 16x iMac 20", 4Gb Ram, 250Gb Hitachi HDDs, Core2Duo 2.6Ghz (iirc) and an X-Server. The iMacs are authenticated to ActiveDirectory, with accounts managed by the X-Server. When users logon, OSX creates a local folder structure for each user (based on the template I created, which is nothing special). It also maps their Windows roaming home folder, and any necessary shares of our Win2k3 servers. So far, I've had to reinstall at least 5x of these iMacs as they bluescreen on poweron, at random, for no apparent reason. Single User mode > fsck -fy makes little difference (altho does repair a pile of fs issues apparently succesfully) - generally leaves me at the spinning bootup logo after it's been run rather than bluescreen, but will go no further. Only solution is to redo a Netinstall off the X-Server. At the moment we're considering splitting them from AD to see if that resolves the issue, but that knackers up multi-purpose useage by other departments (these are in the Music Dept, running Garageband and Cubase 4). I've also disabled all power management as have spotted posts on other forums regarding bluescreening being related to waking from sleep mode. Has anyone else experienced a similar issue with these latest iMacs under similar circumstances? I can't go 48 hrs before there's another one that needs sorting at the moment...
-
Hi I've searched but can't find this specific question answered anywhere. We currently restrict applications via WGM, but this does not stop students bringing an app in on their flash drive and running it, either from the flash drive itself, or from the desktop after copying it. Has anybody come up with a solution for this? Ideally, I would like to restrict ALL aplications except those in the allow list. Many thanks Mark
-
Just a warning to y'all... the 10.5.8 update for OSX server has been known to cause an invalid serial number response within server admin. Mainly affects people using 2 or more network ports operating on the same subnet (eg: a Wireless and Eth0, or Eth0 & Eth 1)... but has also affected people with all network connections on separate subnets. Also affects you if you're running aggregated or bonded links. There's a thread over at apple.com covering it, with no official response as of yet other than to ensure that no two network conns are on the same subnet (not particularly helpful but heyho). See Apple - Support - Discussions - Help MacOS Server 10.5.8 doesn't accept ... Either hold off applying the update, or ensure you can roll it back should you suffer the same problem. It will basically grey out the ability to make any changes within server admin until the issue is resolved.
-
So since I put in a new server so that we could have an actual work network for the macs Ive had so many bugs to work through - random users getting 'library needs to repair to run applications', keychain login constantly popping up, etc... I've gotten to the stage that these bugs are no longer a problem, however log in times can be very long - anywhere from 3 minutes to half an hour... That's IF users manage to log on, sometimes they just aren't able to. According to the endless amount of forums on this topic, this could be due to a number of problems: DNS, TCP/IP Stack, struggle to talk to SMB... Can anyone shed any light into this? Please only respond with actual advice/solutions
-
Found this really handy way of running IE11 in OS X with zero fuss. http://osxdaily.com/2015/10/19/use-internet-explorer-11-mac-os-x-easy Enjoy
-
Has anyone successfully managed to set up software raid 1 on an xserve without reinstalling the operating system? I'm hoping to avoid having to do this. I have tried the instructions detailed here: RAID1 w/out a Reformat | Krypted.com, but I get the error "could not unmount disk 10000", when running the second command. I also got the same error when booted off the installation CD. Cheers
-
Does anyone know where I can get decent help for a PM issue I'm having? Just upgraded our server hardware (mac) and OS. Running Big Sur on the server and Catalina on our clients. Using PM to set restrictions etc. Have 43 Macs. All bar five are working fine. The five that aren't simply refuse to pick up/receive the settings configs from the groups they are in. This is an excerpt of an email I have sent to my Mac guy (who is not available atm) explaining what I have tried: DNS is correct on all of them - they can ping both IP and DNS names for the server and their own names They have all been rebuilt at least twice. . They are added to PM and have the trust and Remote Management profile/certs installed. I have manually removed and re-added these more times than I can count. If I look at a working Mac (one with the settings applied) I can see all the relevant settings from each group appearing in the profiles section. For those not working there are no settings profiles appearing. I have even gone as far as to physically change known working network cables etc to try and troubleshoot.. I have also tried to manually download and installed the settings via the download option in Profile Manager. For most of these settings the download button is greyed out, so this doesn't work anyway but there is one setting that allows downloads. Problem is when I try to install the setting, I get an error message: This profile must originate from a user approved MDM server Getting desperate now... I have done some googling and I see mentions of PHP logs and APNS logs but I have neither of those on the server despite turning on the APNS bit using commands found on the web.. I really don't know enough about Macs to take this any further so if there's anyone out there with any insight or who can direct me to someone who may know something please respond!!!
-
Good morning everyone! Wondering if anyone has had the same issue we're experiencing? Smoothwall seems to be all fine and dandy,,, except! A student made us aware their Mail app on Mac wasn't working. Now I presumed they had made some changes to their settings and mucked it up. But on closer inspection it seems to be a filtering issue. The email in question was a @iCloud account (and a hotmail but one thing at a time). Now they are able to receive mail but not send. Checking the web filter there is no obvious block, so I proceeded to log in myself on the Macbook (this is a BYOD by the way, not a device hooked up to our system), and found it worked fine, with my account allowing full unrestricted access. I then tried adding the SMTP domain that apple uses, to different filtering policies but to no avail. I also tried my own iCloud email when logged in as the student and it has the same issues. I've tried a few other options I've found trawling the interweb but nothing has come up trumps?! The only thing I believe is at the root of the issue is when monitoring the webfilter whilst trying to send, logged in as me it identifies the group I'm associated with. But when logged in as a student it shows 'Unauthenticated IP' group. Which seems odd as can browse and do most things normally as expected. Anyone else found this? I have opened a case with SW but feeling impatient, its Friday, wanna get on with it! Hope that makes sense. Thanks all, Dan -
Great App which gives you PIP mode on OS X. Get Picture-in-Picture Floating Videos on Mac OS X with Helium App | OSXDaily Enjoy
-
Hi all, I have a bit of an odd one, my Deploy Studio setup is running fine apart from one image (unfortunately, the one I REALLY need to use) when i try to deploy it into one of our iMacs I get the error "not enough space on the destination volume" The destination volume is 1TB in size (the image is 100GB approx) as I know the target drive needs to be at least double the size of the image to work, so that should be fine. I have tried repairing the disk permissions and also doing a disk repair from the disk utility but still the problem persists... Any suggestions?
-
Dear Edugeek Community, One of the schools in our Trust has a large number of domain-joined Mac devices running OSX in their fleet. In the main, things work well, but one residual problem that keeps occurring is around the Keychain feature of OSX. Whenever an administrative password change takes place, however it is done (any way except a user doing it on their OSX console), the next time they log in the user sees a prompt asking if they'd like the operating system to Reset their Keychain. If they click Reset, everything works fine, but very often they click 'Cancel' and things are then not fine. There are several immediate reflections here, not least that Apple is not properly geared up for corporate networks, but that's by the by as we are where we are. Another is that it is unavoidable needing to do administrative resets in any user community, let alone one where over a thousand young people are involved. We've tried putting up posters, attempting to education staff and students, but to no avail. We have tried running some Powershell behind the scenes upon resetting the password (to bin out the Keychain directory), but it takes several seconds to run and in a classroom environment, this is an age and would not be tolerated. We could also bung in a Powershell element to run 'later' into a database and pick this up on a cronjob, but this would take even longer. There is another post on here that discusses stripping out the Keychain directory during a holiday-period mass password reset exercise and I could achieve this perfectly easily, but it would not solve the post in-class password reset impact of the OSX user experience. Has anyone found a satisfactory solution to this conundrum? It seems to me that there should be a GPO equivalent policy that would force the O/S to assume the user wishes to Reset their Keychain and not prompt them to make a decision. Does such a thing exist? Any thoughts gratefully received! Richard
-
Hi all, I wasn't sure where to put this so its in here..Move if necessary. I have logged a ticket with sophos but thought id ask if anyone else has a work around as sophos say its apple's design fault In Sophos Central/Cloud I have created a USB policy (for staff only to be read only with some exceptions to R&W - targeted at one test user for now 'domain\stafflogon') and this works fine on PC and now thin client, but will not work on mac OSX. Sophos have said that PC looks at Domain\user but apple use domain\computername\user so cannot use just domain\user as it doesn't see the computer name. Their solution was to add all macs for all staff users E.G Mac 1\user 1 - mac2\user 1 but surely this is not the only way to apply policies to users? its gonna take soooooo long!! and is a bad way of administering users. Has anyone else found a way around this? Thanks
-
Hi All How do you go about imaging any Macs you have? I have read lots about NetInstall/Restore, but that's very old now and doesn't seem to work. I have heard of Deploy Studio but last time I tried to use that it just wouldn't work, though I think that may be worth another go. I'm curious as to what you use, and any recommended reading you may know of, as imaging Macs seems to be poorly documented online, and anything there is, seems to be aimed at the home user. Thanks
-
Hey, we've got a load of Macbooks (os x 10.5) running standalone from the network with non administrative users for students. Our problem is that they are connected to the wireless and students are able to view the key by going through the wireless icon in the menubar. Any idea how to stop them doing this, doesn't matter if it involves removing the icon either. These are not linked to our x-serve/domain in any way. Thanks, Ollie.
-
All Very new to the "Deploy Studio" software, but it looks really great and will achieve everything that I want. However, I'm having problems getting it to do what I want!!! Regardless which way I try and deploy it I hit problems 1. If I try and deploy using the bootable external drive option. It gives me an error saying that it can't create the drive. even though it's an empty 40GB usb. 2. if I deploy via Netboot, the macbook see's the server, so i tell it to do a network boot and then it fails. This is all very frustrating, and I have twenty macs to clone by the end of next week. Any help would be greatly received. If need be I would be more than willing to pay for a couple of hours work. Regards Ian
-
Hi Up until half term we had no issues printing to our Follow-You print queue from our Macs which is setup on a windows server, via LPD. Pretty much 95% of our Macs will now not print and just have the jobs sitting On Hold...I have checked through the cups log and i seem to get this error on pretty much all of them Returning IPP client-error-attributes-or-values-not-supported for Get-Jobs Even when I add the printer directly to bypass the windows queue I am still getting this issue...I have tried everything I can think of...removed the LPD service from windows and reinstalled it, checked all of our switches to make sure nothing is being blocked or bottle necked...just stuck scratching my head at the moment trying to get this to work. I just wondered if anyone had seen this issue before? Cheers
-
Good morning everyone, We've spent a few days looking into this and it's driving us mad so I figured i'd turn to edugeek to see if anyone has any ideads for us to try. We are moving to a new provider for web filtering who now use a locally install agent installed on the Imac to proxy all traffic out to the cloud filter. We've removed the existing providers proxy settings from the machine and have found that safari will not connect to the internet but other browsers will. This also stops the mac from being able to update it's settings and apps from apple. When we run a netstat from terminal we can see that there's still a http get request trying to contact the old web filter address. We've tried numerous things including: -Delete the network / settings plist files, reboot, and let the mac create them again -Double check no proxy settings are ticked -Created an any outbound firewall rule to make sure nothing was blocked -Checked the Hosts file -Checked local DNS and Server DNS and DHCP for any entries that may try and force machines to the old filter -Checked date /time are correct -Removed existing software from current provider from the machine -Ensuring all certs are up to date and enrol the mac with the server again and create new profile -Checked the core and firewall for any legacy settings The OS is High Sierra and it's got the latest supported version of Safari installed, anything newer installs but then doesn't work (annoying that it even lets you install it). We've installed the new web filter agent but have found we experience the same issue so it appears to be machine related. I'm sure there's more that i've forgotten to list above but if there's any other suggestions to try other than reinstalling the OS (we've got gigs and gigs of music software) then i'd welcome them with open arms. We're not experts on apple devices by any means and we've already discussed the option of using them as door stops going forward. Thanks in advance Kind regards, Jonny -
Hi, We have 3 Mac Servers in school; 2 are running Apple Software Update Server on OS X Mavericks. We have successfully setup caching server on both servers and they're communicating with each other to share cached App Store and iOS updates. Is it possible to host multiple Apple Software Update servers without having to point clients to a specific server. Thanks for your help.
-
Hi, We are currently investigating the possibility of upgrading our Music department to Mac's We will be buying another Mac to run as a server. We currently have a Windows network in place using Active Directory Firstly, Would it be possible to manage the OSX Machines using the OSX Server but use Active Directory for the logons? Secondly, Are there any issues I should specifically look out for regarding this setup? For example mapping of shared areas? Would Home directories be mapped from AD? Would shared areas be mapped using the OSX Server? Thirdly, Are there any schools in Birmingham which are using a Mac and Windows system side by side that it would be possible for me to visit? Thanks, Louis
-
Hello, I'm attempting to setup in batch around 100 ipads for school. We have a MacBook Pro with OSX Server and Apple Configurator installed. This all pretty new to me, so I have no idea where to go from here. Does anyone have a step by step of what I need to do? have looked at the OSX Server but with so many options I am clueless where or what to do next. The iPads are for classrooms and they should all have the same configuration. I will be installing the iPads with some 20 free apps and some paid apps. Is there an easy way to do this? All help is very much appreciated. Kindest regards, Paul
-
Hi all, first post on the forums but have been lurking for a while now . I have recently set out to manage our fleet of iMacs in the media block (shock horror), most of my colleagues recoil in fear when they hear of Macs on the domain . I have purchased a Mac Mini and set up the server app on it to act as our management platform, I am using AD to authenticate and profile manager for the policies. My setup procedure: Created a static IP on our server subnet. Renamed the box and made sure it showed up in DNS. Added the Server to the domain. Set up Server.app Configured an OD master via server app. Enabled MDM using our Apple ID. Set up enroll profiles, also downloaded the trust profile ready to install alongside. I have NOT configured any network access rights on profile manager and it is set to all networks. So far it has been relatively painless, considering before this undertaking the only thing I had done relating to managing macs was setting up Apple Configurator and Meraki to manage iPads at my previous employer. I have ran into an issue when trying to enroll devices on another VLAN, this process works flawlessly on the same LAN as the server though. Which made me think it was my end of things i.e. firewall or inter lan routing I have allowed access to tcp 1295 - 1296 in and out from all our VLANs, to the net. I have allowed access to tcp 5223 in and out from all our VLANs, to the net. I have allowed access to tcp 1640 in and out from our server VLAN, to the rest of our VLANs. As documented here. As soon as the client I am enrolling is not on the same VLAN, the enroll profile fails with a timeout error on the client and the following log entries on the server. [2644] [2017/03/21 12:27:20.936] I: Processing MagicController#admin_will_load (for 10.250.10.50 at 2017-03-21 12:27:20) [2644] [2017/03/21 12:27:21.037] I: auth_token does not exist [2644] [2017/03/21 12:27:21.038] I: Filter chain halted as [:verify_auth_token] rendered_or_redirected. [2644] [2017/03/21 12:27:21.038] I: Completed in 101ms (View: 0, DB: 1) | 403 Forbidden https://yc-osx01/magic/admin_will_load [2645] [2017/03/21 12:27:22.144] I: Processing MagicController#do_magic (for 10.250.10.50 at 2017-03-21 12:27:22) [2645] [2017/03/21 12:27:22.259] I: auth_token does not exist [2645] [2017/03/21 12:27:22.259] I: Filter chain halted as [:verify_auth_token] rendered_or_redirected. [2645] [2017/03/21 12:27:22.259] I: Completed in 115ms (View: 0, DB: 1) | 403 Forbidden https://yc-osx01/magic/do_magic Not sure what this means or why being on another network work return a 403 forbidden. Note that the DNS record in AD is YC-OSX01.my.domain.com, but the HOSTNAME of the server is actually YC-OSX01.local - to my knowledge I was not able to change this. However if this difference was the issue it would not be functioning on the same LAN either as all our VLANs use the same DNS. I am hoping I can get some answers here and in return I will try and spread my own knowledge in the forums . Thanks, Gareth.
-
Does anyone know how to enable this in policies across a series of 10.6 macs that are controlled by workgroup manager? I don't fancy a trip to each one.
