[bentoms]

Ok a bit more info…

The users AD Profile has been added to two groups “SEC_allow_Mac_Access” & “DATA_DesignGrp_Modify” both of these groups have been added to OD Groups with similar names via the ‘Magic Triangle.’

The 1st group: “SEC_allow_Mac_Access” is in the OD Group “MAC Access” allows the user to login to Macs & has some MCX settings in place.

The 2nd group: “DATA_DesignGrp_Modify” is in the OD Group DesignGrp Data & has modify access to the folder smb://testmacdc/SHARED/Design with ‘SHARED’ being the sharepoint. The Groups folder is set to the Design folder & it has been set to mount @ login with users username & password via the OD group.

But it will not auto-mount!!

SSO works fine & user can access the folder once logged in.

But, what I want is to be able have all users in the 1st group, & if they require further NW Access to be able to add their AD account to an AD group which is a member of an OD Group that mounts the sharepoint @ login, (in this case “SHARED”) & places the group folder, (“Design”), in the dock.

I know this should be easy but I am probably looking @ it all backwards!!! 😆

[bentoms]

Yep that was it.

Thanks very much.

[bentoms]

Right so, the domain is mycompany.com.

The container ‘LBTH Computers’ is directly below this with three further containers within: Laptops, Desktops & Macs.

It’s the Macs CN that I won’t to create in.

So i guess the FQCN is something like \\mycompany.com\LBTH Computers\Macs.

[bentoms]

[quote]what’s the CN that you’re using?[/quote]

The CN that works is the defualt one, CN=Computers.

Which is fine for the test rig, but when this goes live it needs to be in LBTH Computers\Macs, (\ is used to illustrate folder location).

Any ideas how I can create them in LBTH Computers\Macs via the AD Plugin?

[bentoms]

[quote]You don’t have rights to that then.[/quote]

I have full admin rights to the AD Domain. So I should have rights.

The AD Plugin just advises that it cannot find the container.

[quote]The AD plugin shouldn’t have any issues with putting accounts way deep into other places.[/quote]

So for CN= should I just put in the container name? i.e. Macs & not something like CN=Test Computers/Macs?

[Author]

Posts