AFP548 Changing the world one server at a time.

10.7.2 with AD Mobile User Accounts

Home › Forums › OS X Server and Client Discussion › Active Directory › 10.7.2 with AD Mobile User Accounts

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #381453
    Outlaw68
    Participant

    Hi All,

    I am experiencing a very strange issue.

    I am build MacBook Air operating environments, that bind via a script to a 2008 AD Server. The problem I am experiencing is when the system/Mobile account is removed from the network, the user can no longer access the Accounts Pane in system prefs, it get a message saying “Preference Error – Could not load Users & Groups preference pane”

    Also, if I log out, the Mobile Account cannot log back in again, but local user accounts are fine.

    When I check Directory Utility, under the Directory Editor, the User does not appear, it is like Lion is not creating the account as mobile. I have the AD services pane set up with “Create Mobile Account at Login” enabled, and “Require confirmation before creating a mobile account” disabled.

    The part that makes this really weird, is I have a MacBook Pro 10.7.2 image built off the exact same config (I followed the config sheet step for step) – the only difference is the MBA is built off a MBA Retail Bundle (these images are intended for CSS) and the MBP is built of the MBP Retail Bundle.

    When I look in console I see messages about the “Account be Deleted Out From Under Us”

    Has anyone experienced this before, or would be able to give me some clue where I could look for a solution – the school I work at is gearing up to roll out about 600 laptops early next year, and the deadline for a solution to this is getting very close.

    thanks

    Matt

    #381454
    Outlaw68
    Participant

    Something else I just picked up while testing – I enables the “Require confirmation before creating a mobile account”, and when I logged in with a Network user, it did not ask me for confirmation – I am fairly sure the system is not creating mobile accounts, but I have no idea why.

    #381457
    Outlaw68
    Participant

    A little bit of more research – it seems it is something int he binding process (most likely in the binding process we use here) that is reset wh the OS is re-installed.

    – I used a the MBA Retail bundle to install a system on the computer.
    – I bound the computer to our ad and logged in with a mobile account.
    – I check for failure and confirmed it had the issue I described above.
    – I reinstalled Lion over the top of the system (using the internet download model)
    – The problem was gone.

    but.. when I try to build an image around this, I can’t reinstall the OS after the system is bound (I am working at a school and with the number of system I am using it is just not practical)

    so i did the following

    – I used a the MBA Retail bundle to install a system on the computer.
    – I reinstalled Lion over the top of the system (using the internet download model)
    – I bound the computer to our ad and logged in with a mobile account.
    – and the system failed. (the exact same as has been described above)

    So I am now fairly stuck on where to go with this…

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.