Windows Domain login and timer

We are binding several Macs to the windows domain here. That really hasnt been an issue, we used Centrify Express, and that went fine. Users can log into the domain no problem. All the Macs were built with a service account (UID svc-account) similar to an admin account on windows. Any user can sit down at a Mac and if they enter good domain credentials they get logged in.
But when a mac is first powered on, and gets to the login screen, the svc-account is first presented, then after about 10 sec, a little arrow appears. by clicking on the arrow, you can choose "other user" and log in with domain credentials. Is there a way to shorten this timer, or default to "other user", or default to any domain user account?

Similar Messages

How do I connect to Time Capsule from a Windows 8.1 machine which is on a Windows domain. I have been able to connect from a Windows 7 machine on a Windows domain to a Time Capsule. Airport utility is not displaying the Time Capsule Win8.1 machine

How do I connect to Time Capsule from a Windows 8.1 machine which is on a Windows domain. I have been able to connect from a Windows 7 machine on a Windows domain to a Time Capsule. Airport utility is not displaying the Time Capsule Win8.1 machine.
I have checked that the firmware has been updated to 7.6.4 . Similalrly the Win8.1 machine has been loaded with the update specified in another discussion.

Firstly how are you connecting to the TC.. wireless or ethernet?
Please open a command window and ping it.. ping by name and by IP address.
If ping succeeds at least by IP it should work.
In windows explorer type
\\10.0.1.1 (or whatever the TC ip is.. that is the default).
Having the airport utility for windows loaded can help the process. As it loads bonjour for windows.
7.6.4 firmware on the TC is useless. It works better on 7.6.1
If the ping does not succeed by either name or IP address yet you have internet through the TC, then your network is setup wrongly. You are have firewalls blocking local IP. Take down all the firewalls.

Very slow Windows domain login over IPSec VPN

Hi
I'm experiencing very slow Windows domain logins over an IPSec VPN connection. The AD is in Site 1, some users are in Site 2. Two Cisco ASA firewalls connect both sites by an IPSec VPN over the Internet.
I made some registery changes on the Windows XP client on site2 to let Kerberos communicate over TCP instead of UDP. Still the logins take extremely long (45 minutes). Profiles are very small, so there had to be a problem with Kerberos, MTU sizes or somethin like that. I already changed the clients MTU settings to 1000 byes, but login is still very slow. I made some sniffer logs...
Does anybody know what the problem can be ?
Regards
Remco

Hi Remco,
The most common issue with slowness over VPN is going to be fragementation. In general below are the recommendations to avoid fragmentation
1. For TCP traffic, use "ip tcp adjust-mss 1360" on the Internal LAN Interface on the Router. If you are using GRE then configure "ip mtu 1400" under the Tunnel Interface.
If you are not using GRE then the value of "ip tcp adjust-mss" depends on the type of transform-set being used E.g. AES\3DES etc, so you can increase the value of TCP adjust command from 1360 to a higher value. Though I will start from 1360 first for testing.
Also take a look at the below article for MTU Issues
http://www.cisco.com/en/US/customer/tech/tk827/tk369/technologies_white_paper09186a00800d6979.shtml
Thanks,
Naman

How can i have a multi task approach while working on my iPad? Shfting windows is heavy and time consuming!

How can i have a multi task approach while working on my iPad? Shfting windows is heavy and time consuming!
Also shifting windows while surfing is not easy, when used to multiple screens and easy shifting from one web page to another.
Thks

Not entirely sure what you mean, but this has some info about multi-tasking . iOS 5, which will be available to download on October 12th, adds multi-tasking gestures (from http://www.apple.com/ios/features.html#more) :
Using four or five fingers, swipe up to reveal the multitasking bar, pinch to return to the Home screen, and swipe left or right to switch between apps.
Also Safari will get tabbed browsing in iOS 5, making it easier to switch between pages/tabs.

Help with Windows Domain Login on Mac

Hello Everyone,
We have two Mac Pros at my work running Mac OS 10.5.8 and they are attached to the Windows Server / Domain so when the Mac is turned on you login with your Domain credentials (using Win Server to Authenticate). Now all of this has been working fine since the computers were purchased a year ago, until two days ago that is. I turned on the Mac Pro in the morning and tried to login, and the Mac would freeze and do nothing. I restarted and tried again, using the same credentials I always use, but nothing worked. I called the IT guys and had my windows user account reset thinking that the password was expired, still didn't help, so I asked them to reset the whole account, still didn't help.
At this point I asked a few of my co-workers to login on my Mac using their login info, and they had no problems at all. I decided to dig deeper into this problem and logging in under a "local" Mac account I went into the "Accounts" preferences to check what was going on, to my surprise my Domain account was visible (normally it wasn't unless you were logged in) and under the account it said "sharing only".
I am still trying to figure out why my Domain account was changed from "Admin, Managed" to "Sharing Only"? So I decided that the easy fix here was to use a previously made (and tested) image file which I created when the Mac Pro was first setup and all the software was installed. So after cloning the image to the Mac HD I turned on the Mac and tried to login, again nothing happened. I can login using the local account, and my co-workers can login fine, but my domain login just refuses to work. I have also tired to login on other Macs in the department and I can login just fine on each one, the only Mac that doesn't let me login is my machine.
I have run out of ideas, short of re-installing the entire system from scratch.. which I really don't want to do unless I have to. But if anyone out there has any ideas I would more than welcome them.
Thanks in advance..

It's probably related to some type of DRM (copy-protection) on the digital copy, and not due to it being any particular type of file format. The DRM scheme probably only works under Windows. And if that is the case, I don't think you will be able to get it to work under Mac OS X, short of running VMware Fusions or Parallels Desktop (or Sun's free VirtualBox) and installing Windows to run under Mac OS X.
Considering the popularity of Macs recently, and higher use of Macs among creative folks, it's pretty stupid for the studio/distributor to make a key feature Windows-only.

Get Windows domain name and user through jsp

I have a jsp page that will be viewed through ie on windows platform, that is a member of domain.
I need to get the domain name and logged in windows user name to use it in my page.
I've looked through similar topics. Found no answer.
1.
System.parameter("user.name") is not ok. it returns user that runs jvm.
2.
import com.sun.security.auth.module.NTSystem;
NTSystem system = new NTSystem();
system.getDomain()
system.getName()that didn't work through jsp, though the answer is correct.
3. I found some api at http://www.sinotar.com/download/swin/doc/index.html
it did the right thing, but it's not free.
Could anyone advice me smth?
I've looked

well, it won't work in your jsp because jsps run server-side
could try putting an applet on your page that does it, but I wouldn't be surprised if the security manager put the kibosh on that, too
a third - but clunky - way would be to write a quick java app that does it, and launch it through WebStart. bit ugly, and needs extra user input they might not want to do

Keep track of user logins and time

Is there any way to track users on our xserve quad xeon...such as login date and times?

Hello, tinafromrandolph, and welcome to the AppleBoards,
What services are you interested in keeping track of? AFP, for instance, logging can be set to monitor anything from login/out times to file actions.
You would need to parse the log data in some way if you were looking to make a regular report or something like that, but that's true of about any log file you want to investigate. It largely depends on what service(s) you want to monitor and how detailed their logging is, but a lot of stuff is or can be logged.
If you are more specific there may be more detailed help people can provide.
=Tod

HELP . . DOMAIN LOGIN AND PASSWORD

I just purchased a toshiba computer which I hate. I'm trying to get on internet explorer and I keep getting a log in which says connecting to 062d-gni-wfe-pri-vip-spoded.com. . .asking for log in and password which I don't know.
How do I find out what the login and password are?

Hi,
Do you mean that IE is automatically redirected to the webpage and inform you to type a name\password which you don't know? Are you able to connect to other webpages? Please check whether the internet connection is fine. Some ISP might inform you to enter
an credential if you want to gain internet connection via IE.
If the webpage is not set by ISP and you even don't know why it occurs, then I would recommend you run a virus scan in case malware\virus infection.
Or open IE, check the homepage, please also check IE proxy setting under internet option\Connections\LAN settings.
Or Lanch IE in no add-ons mode, check the result, run iexplore.exe -extoff
to launch IE in no add-ons mode.
Yolanda Zhu
TechNet Community Support

Script to query OU for last Windows update date and time

Hi All, I need help in writing a script which can query an OU in active directory and then return most recent date of windows updates installation. It will also be helpful if the script can sort the names and then send output to a file (any format will
do). I know basic of querying a local computer but not remote query, I am terrible at scripting side of powershell. Thanks people.

I am referring to the script below, how can I get the result to output in an XLS or CSV format, I tried couple of combinations but couldn't get it to work.# This script shows the last time that a successfull Windows Update was installed.clsadd-PSSnapin quest.activeroles.admanagement
$OnlineServers = @()
Get-QADComputer -SearchRoot 'domain.com/ServerOU'-OSName "Windows*Server*"| %{
  $PingResult = Get-WmiObject-Query "SELECT * FROM win32_PingStatus WHERE address='$($_.Name)'"If ($PingResult.StatusCode -eq 0)
     # Add the current name to the array$OnlineServers+= "$($_.Name)"
foreach ($Serverin$OnlineServers )
        $key = “SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install”
        $keytype = [Microsoft.Win32.RegistryHive]::LocalMachine
        $RemoteBase = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey($keytype,$Server)
        $regKey = $RemoteBase.OpenSubKey($key)
        $KeyValue = $regkey.GetValue(”LastSuccessTime”)
        $System = (Get-Date-Format "yyyy-MM-dd hh:mm:ss")
        if    ($KeyValue-lt $System)
            Write-Host " "
            Write-Host $Server"Last time updates were installed was: "$KeyValue
    }

Apple Mail on Macbook via windows domain network and microsoft TMG

Hi folks.
We run a windows network with server 2008 tmg, dcs, and exchange 2007.
We have a few mac clients on our internal network. They log on locally but have all the correct network settings etc for proxy, network and internet access. Everything works fine through TMG including apple mail to our exchange server, and web browsing etc.
The one thing that isn't working is apple mail to other mail providers. Specifically Gmail.
I've created an access rule for testing purposes to allow all outbound traffic from a macbook pro. It still doesn't work, with the following being the only error:
Denied Connection RHSTMG 21/05/2010 10:27:07
Log type: Firewall service
Status: An ingoing packet was dropped because its destination address does not exist on the system, and no appropriate forwarding interface exists.
Rule: None - see Result Code
Source: Internal (10.1.0.81:5353)
Destination: External (224.0.0.251:5353)
Protocol: Unidentified IP Traffic (UDP:5353)
Additional information
•Number of bytes sent: 0 Number of bytes received: 0
•Processing time: 0ms Original Client IP: 10.1.0.81
Someone on another (microsoft) forum said this:
224.0.0.251:5353 is RendezVous protocol, which is used by Mac OS for locating services. it is multicast protocol and it's only purpose is locating things.most it has nothing to do with Google Mail.
The mac has entirely unrestricted access to everywhere (in theory).
Gmail account through windows 7 client using outlook is fine by the way.
Nothing else is denied or refused when looking at the live logging.
Any help with this would be great.
Thanks
Dave

I had this problem too, but I found a post burried on the web that said to add " p06- " (without quotes) before the imap and smpt server names and that worked:
p06-imap.mail.me.com
p06-smtp.mail.me.com
Everything stays checked, SSL for both, authentication and use same username and password checked.

Windows Domain Thuursby and Centrify..which one..both?

I am looking at have my Mac environment integrate with my Windows environment. I have 30x as many windows clients as Mac's I have the typical Windows office environment...AD, File Servers,Group Policies..etc,
I rather not have to go through expense of putting a OS X 10.6 server just to control 6 macs. I would like them to authenticate to AD and provide managment of the Mac environment.
I have done some research on Centrify and Thursby products and they both seem to be a recommeded solution.
I seems that Thursby does a better job of connecting to shares/DFS and Centrify does a better job of GP/AD integration.
So is it a one or the other senerio or is one perfed over the other?

Hi
Either one or the other. It's your choice as both achieve similar things. AFAIK Thursby's latest product is the only one that supports DFS attached volumes. If you go for Centrify you may need another product such as ExtremzIP for DFS Support? You can connect to any Windows based share without the need for anything beyond what's available in the Go Menu. A 'Mac Server' is not that expensive? Apple's mac mini server with SLS Unlimited may actually be more cost-effective? There are other technologies such as NetBoot and SUS you might consider using that might make the cost viable? If all you want is a means to manage the macs then any hardware that meets SLS minimum requirements will do. This would include laptops although they would not be officially supported for SLS use.
However:
Thursby's product does involve the use/support of an application you may not be familiar with? AdmitMac is installed on the Mac Clients. I'm not absolutely certain regarding the pricing/licensing but I think it's a per seat license? Centrify (or Likewise) is installed on the Windows Server. It 'sits' on top of the AD Schema and 'maps' apple-specific Object Classes, attributes and values that correspond with windows-specific ones. GPOs that are applicable to windows workstations can then be applied to mac ones. Everything is done from AD. No need to use/support another management application.
There are other ways of doing this depending on your skill set and requirements? You could alter the AD Schema itself? Create/add the appropriate Object Classes, attributes and values yourself. All you would need thereafter is WorkGroup Manager installed on a client mac workstation to assign appropriate MCX (or mac-style GPOs). Another way would be to download WorkGroup Manager (free to download) and install it on the mac workstations directly. Create a 'generic' local account separate from a locked down local administrator account and use WorkGroup Manager locally to manage that account or computer. WorkGroup Manager allows for finer 'granular' control beyond the built-in Parental Controls. If users are going to be 'using/sitting at' the same workstations rather than true roaming profiles a similar result can also be achieved.
These last methods involve no expense at all. Just some time and effort on your part which you would have to invest anyway.
Tony

Windows XP SP3 and Time Capsule Delayed Write Failed

I am having difficulty getting my MacBook Pro to back up to my Time Capsule.
TC is 1TB.
Works fine with OSX.
XP SP3 on wireless network allows full internet access and print sharing and also allows very small backups (i.e. one or two documents in a folder) without a problem.
When I try to do a few folders (let alone a full back up) I get an error - Windows delayed write failed.
As I can do small backups I think that this rules out a problem communicating with the TC and also any issues with the formatting of the drive (I have left it as it came from apple - although a right click on the drive states FAT32).
I have a poor work around which is to use Macdrive to mount my OSX disc and backup to that. Reboot into OSX and let time machine take care of the rest.
Very messy but also rules out a size problem and I suspect that this also rules out any problems with the backup utility (Microsoft XPs own)as I don't get the same error with this "networked" drive
I have spent some time looking for ways to fix this and the windows support site suggested disabling a cache option under properties if you right click the drive. This option is not available for the TC as properties only give you information on the free space.
I am now at a loss as to what to do to make this work

Kappy,
Thanks for taking to time to reply.
I don't believe that the TC is FAT32 formated as it is working fine with OSX and I have not formated the drive from how it shipped from apple - which I guess is Mac OS Extended as you described - Have just checked and it is indeed Mac OS Extended (Case-sensitive, Journaled)
What you suggest with winclone is effectively what I am doing using MacDrive (which allows me to mount the OSX disc in XP and write directly to it).
Is there not a way to back up straight from XP without going via OSX (the literature on TC would suggest this is possible).
I had looked at retrospect to use as a backup instead of XPs own but think I will have the same problem with disc caching. It is not that I cannot write to the TC (as I can in small sizes) its just that I get the error delayed write failed if I try to do a full back up.
Message was edited by: Juan Quirk

Getting windows domain login name into java application

Hi,
I am looking how can i get user name of windows logged in user. I want to display the user name in the welcome message of the application. The user will be logging into the domain. Please note that I need windows logged in client user name.
Please give suggestions or any direction on this.
Thanks

Thanks a lot for your prompt response.
I tried the example. It works really great from the command prompt.
How do I integrate with application.
My application runs on OC4J server. I hope I need to change the java security.policy file or something to point to my application sepecific policy file (i.e. in the example, the file that we give thru command line).
Not sure.
If possible can you give me some idea on how to change these policy files.
I know I am asking too much, but please help me in this.
Thanks

How do I sort clips in the Project Assets window by date and time before dragging into the timeline?

I am using Elements 12 and don't seem able to sort clips by time and date (when using clips from different cameras) as we were able to in an earlier version of the program.

Roger A
I will think about it some more to make sure I am not overlooking anything, but, as far as can be determined, your sorting choices in Project Assets are under Sort by, with only two options:
a. File Name (ascending)
b. Duration (ascending)
ATR

Can I make a wireless Windows domain? And does Group Policy work to limit domain accounts' capabilities?

The first, most important question of this thread is if I can form a wireless domain or if I have to do it wired.
If it matters, I have a Linksys E1200 router that does wireless and wired.
My second question refers to Group Policy. Is this the way domains limit their user account's capabilities? Because I was planning on making a domain, so that I could have unified user accounts that I could control from the server, limiting what those accounts
can access for further security. Is this what Group Policy does, and how would I move with starting that?

Hi Adrian,
>>The first, most important question of this thread is if I can form a wireless domain or if I have to do it wired.
Just as Alan suggested, Active Directory domains support both wired and wireless connections.
>>My second question refers to Group Policy. Is this the way domains limit their user account's capabilities?
Group Policy is an infrastructure that allows you to implement specific configurations for users and computers. Group Policy settings are contained in Group Policy objects
(GPOs), which are linked to the following Active Directory directory service containers: sites, domains, or organizational units (OUs). The settings within GPOs are then evaluated by the affected targets, using the hierarchical nature of Active Directory.
Consequently, Group Policy is one of the top reasons to deploy Active Directory because it allows you to manage user and computer objects.
Regarding group policy, the following link and articles can be referred to for more information.
Group Policy for Beginners
http://technet.microsoft.com/en-us/library/hh147307(v=WS.10).aspx
Group Policy Planning and Deployment Guide
http://technet.microsoft.com/en-us/library/cc754948(v=WS.10).aspx
Group Policy
http://technet.microsoft.com/en-us/windowsserver/bb310732.aspx
Best regards,
Frank Shen

Windows Domain login and timer

Similar Messages

Maybe you are looking for