Active Directory File Sharing via the desktop

[seung]

Okay I don’t know too much about AD – only the concepts so I’ll try and explain this.
What our CTO asks is that we are able to remotely monitor (ARD) and view, copy all files a Mac OS X user has within their home folder.
Here is what we have performed. Don’t ask why – lol. If anyone can explain why this works or has any comments suggestions I would greatly appreciate it!

———————————————

All mac desktops are bound to Active Directory (all domain controllers are Win 2000 Servers).
Login as domain administrator
Mac OS X will ask if you would like to create a mobile account – select yes
After logging in go to system preferences / file sharing / enable both File Sharing and Windows File Sharing (will ask which account you want to enable this on – select the administrator and authenticate)
Navigate to the users home folder, select and perform a get info
Change permissions to (domain admin) administrator – owner (from current username), DOMAIN/….
Logout
Here is where it gets funky!
Connecting from a Mac OS X desktop – connect to server , browse, network folder, select the user
Authenticating as domain admin only grants you access to the public folder/drop box
Authenticating as local admin grants you access to everything

I’m baffled and there has to be an easier way to perform this…….

[Author]

Posts