AFP548 Changing the world one server at a time.

Newbie Mac Administrator

Home › Forums › OS X Server and Client Discussion › Questions and Answers › Newbie Mac Administrator

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #370288
    cmartin2004
    Participant

    I’ve got a question maybe someone can answer or help point me in the right direction. At the corporation that I work we have a Windows 2003 domain. We also have a small network of Mac’s that are segregated from the windows network, no one knew how to support the mac’s so their support was contracted out and they were given there own small network and internet connection. This group consist of 6 OS X Tiger computers. I work in the IT department and decided that I would take over the Mac’s and join them on our Windows network.

    I have learned a little bit about the OS X clients and I’ve joined one machine to the domain and I’ve got everything working. We’ve just purchase another company with alot more OS X clients and they too are going to be on our Windows network, but they’re in a remote facility in NY and I’m in NC. We had a meeting with our reseller that told us that if we were to buy OS X Server it would be alot easier to handle the authentication between OSX and Windows Active Directory. They said that the OS X Server would handle all of the authentication for the OS X clients. So far I haven’t been able to figure out how to make the OS X clients authenticate with the new OS X Server, they usually go to one of the other windows servers on the domain. All of the user accounts were created in AD.

    Is there a way to have all of our Mac’s authenticate with AD using our new XServe Server?

    #370298
    TechnoMac
    Participant

    Its all done via a clever little application in Applications/Utilities/ called Directory Access.

    There is in fact no need for a mac server to bind macs to AD, you can add just the correct details in Directory access to the AD plugin and bind the machine. It will then when a user logs in use the default profile. The mac server software is really only necessary to lock the machines down, as your GPOS wont affect the macs unless u buy a product such as admitmac or citrix.

    I personally dont like third party software packages and so i would bind each machine to AD and to LDAP (Mac Server).

    Use the mac server to control each client using open directory and the windows servers to control the user accounts.

    You will need to make sure your mac server is set up as an open directory master, this is all done via another application called server admin which comes with osx server, and then bind all your machines to your mac server and administer them using workgroup manager.

    Apple have a good guide on their site to set this all up

    TechnoMac

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.