[sboomer]

We also run DeepFreeze in this enviroment and found a work around here for it:

[url]http://www.mikespike.org/2008/08/12/osx-leopard-deep-freeze-and-active-directory-oh-my[/url]

The solution for was to run: (From Terminal)

dsconfigad -lu username -lp password -passinterval 0

The we rebound all the computers and refroze. We haven’t had the problem since.

Does anyone have a clean generic script for bind a computer to a domain using it’s current ad bind?

[sboomer]

Interesting.

I am using 10.5.6 on my clients, and did not really have time to test 10.5.5.

What we ended up doing was placing an applescript on the desktop that only defined the path of the share.

The script was written like this:

mount volume “smb://server/share”

Then we saved it as a run only application, and when the user logs in with their AD account, they need only to click on the script and it mounts all the drives I defined in the script to the desktop. No password needed.

So in that respect Kerberos seems to be working, mnus an annoying script icon on the desktop all the time.

What is bothering me is nothing I do seems to get this script to run automatically all the time, and cause I am a neat freak I cannot seem to get it to go in the dock either, but I havent had a lot of time to mess about with that since this work around works for now.

I am not very familiar with how to edit or setup and MCX record. I am afraid to say I am an idiot in this respect, but there I said it.

Could you point me into this because I have been trying to find a way to learn it.

[sboomer]

When you say you try to login with and OD account, are you using a user account you created in OD?

Cause that kind of defeats the purpose of the triangle setup.

I am using this setup rather successfully thus far (Minus some very annoying Deepfreeze issues, whcih we are getting around) but the only thing I use OD for is group management of active directory users and groups. This works extremly well and elminates the need for having multiple user databases.

What services on the mac are you trying to use with this?

[sboomer]

Well sure let me explain.

My main task for this was to get this setup in lab enviroment, where as, users would not neccisarliy be setting this up for there personal emails or any other types of pesonalization. I needed a generic way for users to not have to run first run setup. (Deep Freeze Enviroment)

If I needed to personalize “Office” for a user I would have to manually setup them on once they login. This is a pc issue too as I cannot expect my users to understand imap pop or exchange setup without having me do it for them.

So as far as automating the personalization for a user, you may need to set them up yourself the first time, or provide a network home directory to retain there settings from machine to machine.

Sorry this probably isnt a solution that would work in that aspect for you.

[sboomer]

Interesting note about this:

This seems to be happening through the network browser anyways. I go to GO->Network->Server The share will eventually show up in here. So on some level this is happening but I think I am too stupid to figure out how that is happening and make that show up in the dock or desktop.

[sboomer]

Wow! Thank you this solved everyone one of my issues. I didn’t even know about the user template folder ha!.

[Author]

Posts