Automounting SMB shares via AD Groups

[bentoms]

Hi Guys,

My little test rig of AD-OD is coming along nicely… jus got one question….

How do you mount an SMB volume @ login?

What we are looking for is a way for the users to automatically mount a win 2k3 hosted “Group Folder” @ login.

The Users AD profile has the correct access & logged in as a user you can mount the share via “Connect To Server” at the address smb://Testmacdc/Shared. But I cannot seem to get it to automount via managing the groups prefs in OD.

The Users are already part of a group for their MCX settings….. I jus wanna be able to add them to other groups for automounting of shares @ login.

Regards,

Ben.

[bentoms]

Ok a bit more info…

The users AD Profile has been added to two groups “SEC_allow_Mac_Access” & “DATA_DesignGrp_Modify” both of these groups have been added to OD Groups with similar names via the ‘Magic Triangle.’

The 1st group: “SEC_allow_Mac_Access” is in the OD Group “MAC Access” allows the user to login to Macs & has some MCX settings in place.

The 2nd group: “DATA_DesignGrp_Modify” is in the OD Group DesignGrp Data & has modify access to the folder smb://testmacdc/SHARED/Design with ‘SHARED’ being the sharepoint. The Groups folder is set to the Design folder & it has been set to mount @ login with users username & password via the OD group.

But it will not auto-mount!!

SSO works fine & user can access the folder once logged in.

But, what I want is to be able have all users in the 1st group, & if they require further NW Access to be able to add their AD account to an AD group which is a member of an OD Group that mounts the sharepoint @ login, (in this case “SHARED”) & places the group folder, (“Design”), in the dock.

I know this should be easy but I am probably looking @ it all backwards!!! 😆

[bentoms]

Ok I can mount the shares but realsied that nested groups do not inherit preferences… and the below confirmed this (from apple.com)

[quote]Mac OS X Server 10.4: Nested groups do not inherit managed preferences
Pages 25, 77, and 89 of User Management For Mac OS X Server 10.4 or Later contain incorrect statements regarding the inheritance of managed preferences for nested groups.

Nested groups are useful for inheriting access permissions, but only preferences from the workgroup selected during login (not any workgroups via nesting) are used for group preferences.

If you need additional management options for members of groups (or multiple groups), please consider adding additional management options at the User or Computer level.[/quote]

Ok so…. that last line:

[quote]If you need additional management options for members of groups (or multiple groups), please consider adding additional management options at the User or Computer level.[/quote]

Does that me I need some kinda Login Script? If so…. please could someone point me in the right direction.

[Author]

Posts