AD Authentication problems

[grog]

We run a Windows network and have about 200 Mac client machines. Most machines are running the most recent version of Panther and some are running the most updated version of Tiger.

I have used Directory Access to bind about 80 Macs to our Active Directory (win 2k) server. After binding and adding the authentication and contacts paths, I am having a couple of problems, namely:

1 – It takes forever for a user to log in. Sometimes a full four minutes

2 – If they open Safari, they get an error message saying that the bookmarks cannot be found. They can close the error but it pops up a few times. They cannot save bookmarks, open Microsoft Office (there is not enough memory or disk space to open word is the message that pops up). It seems the machine is completely locked down to read only.

I tried a test on one machine. I checked off Create a mobile account for this user and was able to log in as a student do everything, however, if the student saves to the desktop on that particular machine, they can’t retrieve their document from a different machine in the lab. Additionally, we have hundreds of kids here. I’m trying to avoid having each student have a local account on each machine.

I’ve read all of the documentation that I can find online from Apple and various boards but can’t find anything related to this particular problem.

Any advice would be appreciated.

[Paul_Forbes]

Hi all, we’re having the same problem that grog is having with Mac OS X clients and Active Directory, except it doesn’t take forever to log in. We have problems with MS Office, Eudora, Safari and probably other apps that we haven’t tried yet.
We’ve also noticed that if a Mac client on AD copies a file to the Windows 2003 server, we get an error that says “The operation cannot be completed because you do not have sufficient privileges for some of the items”, but the file still copies to the server.
If we try to copy a file from a Mac that is not on the AD, it copies fine with no error messages.
Any advice will be greatly appriciated.
Thanks.

[Author]

Posts