[xenedar]

I’m still struggling with this. The only way I can make computer accounts in OD is to disable AD temporarily, make the account, then re-enable AD.

Is this a common issue? I’ve configured it in a fairly out-of-the-box sort of way. It seems odd to me, as the Magic Triangle configuration is supposed to still be a valid arrangement in 10.6.

Is it possible to disable OD’s mapping of AD computer accounts? ie: to use users and groups but become unaware of the machine accounts?

[xenedar]

Ah. This is the same as [url=https://www.afp548.com/forum/viewtopic.php?showtopic=25933]my question[/url].

Can anybody provide any insights?

[xenedar]

We added a startup item to turn off the AirPort card when the computer is starting up. This helps prevent the computer from automatically jumping on the user’s home network, causing Login Window to spend 5 minutes or more slamming into the brick wall that is the firewall around our Active Directory domain before it finally times out.

With no network, the computer auths locally using the cached data and logs in immediately. Once logged in, they can then turn the wireless card back on to use their personal network.

From memory, something like:
networksetup -setairportpower off

[xenedar]

[QUOTE][u]Quote by: gneagle[/u][p]defaults write com.apple.iTunes disableCheckForUpdates -bool YES
[/QUOTE]

This doesn’t do what you think it will do. It stops iTunes from checking for newer versions of iPhone apps. In your Applications category in the iTunes Library, it will grey out your “Check for Updates” and “X Updates Available” label at the bottom.

I’ve yet to be convinced that it actually does prevent iTunes version checking.

(Note that the “disableMiniStore” key doesn’t work if the version is out-of-date, as regardless of the state of this key, the “MiniStore” bar will open offering the possibility of upgrading to version 8 to gain the Genius feature. So even if you do suppress the Check for Updates check, iTunes will still want to get you up to version 8.)

[xenedar]

Couple of extra bits of info:

1. I have changed my AD password, several times.
2. Users created in the OD domain have no problems, just AD users.
3. The AD domain is listed above the OD domain in the Directory Access/Directory Utility Authentication tab.
4. I’ve also tried this, with no success:

http://lists.apple.com/archives/macos-x-server/2007/Jan/msg00337.html

[xenedar]

[QUOTE][u]Quote by: OkiKowai[/u][p]I am having very similar issues and am considering moving back to the 10.4.10 AD plugin. However, without doing the install for 10.4.10 server onto some other hardware, does anyone have a copy of this plugin that I can get? It would be greatly appreciated.[/p][/QUOTE]

Can you try opening the 10.4.10 Combo installer into Pacifist?

[Author]

Posts