AD/OD integration, are we going about this the right way?

[Sean]

Hi there,

We’re trying to help attach OS X.4.2 Server to a Win 2003 server for authentication.

The OS X Server has been bound to the AD server and we can see all the AD user information in Workgroup Manager including groups (although for some reason only 1000 users seem to be listed at one time in WM).

We have set up the server to be an Open Directory Master with the aim of using the server to manage groups locally using LDAP so we’re dragging groups and users into new OD groups to apply specific properties etc.

We’ve found that if we drag an individual user account and try to manage that it works to some extent but if we drag an AD group into an OD group then management preferences aren’t applied to a user who is in that group.

Is OS X Server able to handle AD Groups and do this kind of management? or do we have to add individual users to OD groups and manage them that way?

Sorry if this all sounds a bit confused, I’m trying to help a school who have a great PC network team but no Mac experience and my Mac experience is very limited on the server side.

Our client machines are both bound to AD in Directory Access and to the OD Master using LDAP.

The outcome we hope for is to have Windows home folders mounted in the dock for all users and for some users in groups to have additional AFP mounts for storage auto-mounted.

Any pointers, advice or slaps in the face anyone can give would be greatly appreciated! 😳

[Author]

Posts