[simonknee]

I may have a fix for this…

Had exactly the same problem as you lot describe.

The key to my fix is that I have two domain controllers (DC) on my domain but only one was set to be a global catalogue (GC) server.
I set them both to be global catalogue servers in AD Sites and Services>>>NTDS properties.
Now the users that couldn’t mount their home share do!

I have seen this with windows login’s too. Some users use one DC and some the other. Don’t know why or where this is set in AD

This’ll be why your lab environment works, betcha only have one DC and one GC.

If you can’t admin your Windows servers then can you set which server to logon within the OSX Directory Access > Active DIrectory settings.
See if you can set this to which ever DC is a GC in your domain.

cheers

Simon

Update….

I think that you also have to make sure that Authenticated Users are allowed Read permissions on the account. You can only do this in AD on the server. You need to enable the advanced view to see the security settings.

Simon

[Author]

Posts