AD accounts and workgroup manager settings

We have several Windows AD accounts that can logon, but are not applying the correct settings that have been created in workgroup manager. Open Directory and Active Directory bindings appear to be fine.
Can anyone help!!

The folks who hang out in the OS X Server forums are helpful for these kinds of things:
http://discussions.apple.com/forum.jspa?forumID=1232

Similar Messages

Can't create computer account in Workgroup Manager

Hi everybody !.
I am installing a new Xserve with Mac OS X Server 10.5.6 and I am having some trouble with computer accounts in Workgroup Manager.
I have a couple of PCs with Windows XP that I have added to the Windows domain created by Mac OS X Server with no problem,and they do appear in my computer account list, with the name PC_NameX$.
My Xserve also appears in this list with the name ServerName.DomainName$
But my iMacs (with Mac OS X 10.4.11) are not listed. When I try to create their accounts, I write their names and their MAC address but when I push the button "Save", Workgroup Manager says that I can't create this account because there is a computer with that name and that MAC address yet.
I can't find a solution for this problem by myself. Could anybody give some advices to solve it ?.
Many thanks.

Hi Mabel,
In my computer list appears my Windows computer names (followed by a "$" symbol, i.e., name$) and my Xserve name followed by domain name and a "$" symbol, i.e, name.domain$. Finally, there is a Guest account I added a few days ago (without "$" symbol).
No iMac is listed here. When I try to add them manually, I write "Name", "Short Name" and "Ethernet ID" fields, and when I push "Save" button, I get this message:
"The name you have chosen conflicts with a name assigned to another computer. You can’t assign the name “Pollux” to two different computers. Remember that names are not case-sensitive when checking for conflicts." (Pollux is the name I gave to one of the iMacs).
If I change this name and use another one, but I don't change "Ethernet ID" and then push "Save", the message is:
"The ethernet address you have chosen conflicts with an ethernet address assigned to another computer. You can’t assign the ethernet address “00:17:f2:d3:38:95” to two different computers."
So, It seems that WGM knows Name and Ethernet ID from this iMac because it does not let me type them again, but I have not typed this information before nor the iMacs are listed in computer list.
This is what I don't understand.
I have have read chapter 6 "Setting Up Computers and Computer Groups", the one that starts on page 105, from top to bottom. I have not found a single clue that helps me solving this problem. Here explains the procedure when everything is working properly.
Finally, another piece from the puzzle. There is an iMac, that always connects to Directory with Airport interface. I have tried to add this iMac, manually. Well, I get the name conflict message, the Ethernet ID conflict message (with its airport id) and... an Ethernet ID message when I type its Ethernet ID. It seems Directory knows this Ethernet ID even, it has never been used to connect to it.
Is there some detail I am missing ???.
Kind regards.

HT1338 XSERVE 10.6.8 is running very slow, and Workgroup Manager is not responding

XSERVE 10.6.8 is running very slow, and Workgroup Manager is not responding. There is no more updates to download.

munish khanna wrote:
1. upgrade to lion, which should over write previous software and the reasons for it being slow.
No, you don't want to upgrade over a buggy system, Lion has issues of it's own that will only complicate matters, plus Lion is slower than Snow Leopard.
Learn all the pitfalls before you upgrade to Lion, like all your Rosetta/older programs will no longer work and more.
Leave Lion for a new hardware purchase is my advice, it's still got plenty of security and other issues.
For your performance, your likely better off replacing the hard drive with a 7,200 RPM model and maxing the RAM, download the free MacTracker to find out your specs, and OtherWorld Computing is good for videos, tools and parts.
http://eshop.macsales.com/installvideos/
2. Format the hard disc and reinstall snow leopard.
That will work, provided your data is off the machine first.
Now how do i reinstall snow leopard as it was an online purchased upgrade from leopard.
The 10.6 Snow Leopard disk that you upgraded 10.5 Leopard from actually has the full OS X 10.6 on it.
All you have to do is stick the disk in and hold the c key down while booting, use Disk Utility to erase the entire drive, quit and install 10.6.
Of course your not going to get the free iLife that came with the 10.5 grey disks, see if you can first install 10.5 with the same methods, then setup with the same user name as before, then upgrade to 10.6
I think Apple nulled booting off the 10.5 disks, but it won't hurt to try.
Another method would be to install 10.6 fresh by itself, then use the program called Pacifist to extract iLife from the 10.5 disks.
http://www.charlessoft.com/
Read here for plenty of how to's
https://discussions.apple.com/message/16276201#16276201

Computer accounts in Workgroup Manager

Is it just me or is there no way to browse the network for computers and add them as computer accounts in 10.5 server's Workgroup Manager? I can tell you I am not going to manually enter over 500 computers one at a time. Apple needs to stop taking steps backward with 10.5 server and reinstate the 10.4 server functionality here.

This one had me scratching my head yesterday. There used to be a browse function in 10.4.x Workgroup Manager where you could browse the network for machines and then drag them in. I have been looking all over for this function in 10.5 WGM. After I couldn't find it I started reading through the manual to see what it says. All it mentions is adding them by MAC address. Is this feature really gone ? Are they planning to add it back ? As a plan B is there some way to import a list of MAC addresses ?

Can't re-enable accounts with workgroup manager

Morning,
We have had cause to disable approximately 100 student accounts earlier this week, and we are now finding that we can not re-enable them. This is a major problem as it's coming to the end of term and they all need to be able to login!
The server is running 10.4.6 and the accounts were disabled using Workgroup Manager by selecting the account, unticking the 'access account' box and then saving.
I am trying to re-enable the accounts by simply reversing the process, i.e. ticking 'access account' and then clicking save, however every time I try this the following error pops up:
"Got unexpected error
Error of type eMemoryAllocError (-14901) on line 3318 of /SourceCache/ServerManagerUserGeneral/ServerManagerUserGeneral-193.2.5/UserAdva ncedPluginView.mm"
I have tried this with various of the disabled users on various different machines (including the server itself) and the same error comes up universally. I've had a poke about on Google but I can't find any reference to this happening anywhere else.
My inital thought was that the admin tools were out of date but looking we have version 10.4.4 of Workgroup Manager which is what is available on the apple site; is this the latest version?
I thought the point releases for admin tools ran in parallel with the server versions, i.e. the latest server admin tools would be of version 10.4.6?
Any help/ideas appreciated...!
Ian Atkinson

Additionally, I have come up with a fudge:
I have turned on the advanced view in Workgroup Manager so that I can see the LDAP inspector for each user. If I delete the two attributes 'AuthenticationAuthority ;DisabledUser;' and 'dsAttrTypeNative:authAuthor ;DisabledUser;' and then save, I can then go on to tick 'access account' and save with no problem (which does in fact re-enable the account).
I don't know if this sheds any light on the subject, but it's working for now at least...
Ian.

Unix and workgroup manager in 10.4 & 10.5

hey folks:
since we don't have an OD master, we're running workgroup manager (WGM) locally on about 40 macs to manage access to certain system pref panes. we also prevented opening of WGM on each machine except from the root account.
i'm looking for an elegant way to use the command line to UNDO this work and push that solution via ARD. right now i've tried running these lines of code:
sudo rm /Library/Preferences/DirectoryService/*
sudo rm -dr /Library/Managed\ Preferences
sudo dscl . -delete /Config/mcx_cache
and this works, but only temporarily. while it immediately allows access to ALL system preference panes, if the machine is restarted, WGM re-asserts itself and the managed prefs are, once again, put into play.
i want to avoid going to each machine, logging in as root, launching WGM and unselecting the choice i made some years back to manage the system pref panes.
any thoughts?

Here is how I got mine to work, I figured ill share since it was driving me crazy...
open workgroup manager
Click "cancel" on the login window (with the grayed connect)
from the menu click on "server -> view directories"
workgroup will load in "not authenticated" mode
click on the lock symbol on the far right
enter your diradmin or admin user name and password
This seemed to do the trick for me, hope you have the same luck I did.
Now I want to know why it stopped working in the first place

Synch problem - Server.app and Workgroup-Manager

Hello everybody,
I have been having troubles with this OS X Server from the very beginning - I even went through the hassle of a complete new installation - Server.app failed from the very begining.
I found something new today. Take the Network-Accounts or Groups (it is an Open Directory Master) and view them in Server.App and in Workgroup-Manager to compare entries. Every group in Workgroup-Manager is visible in Server.App as well - BUT - the members of a group (visible in WM) aren't showing up in the respective group if viewed at through Server.App?! What is going on here?

Hello everybody,
I have been having troubles with this OS X Server from the very beginning - I even went through the hassle of a complete new installation - Server.app failed from the very begining.
I found something new today. Take the Network-Accounts or Groups (it is an Open Directory Master) and view them in Server.App and in Workgroup-Manager to compare entries. Every group in Workgroup-Manager is visible in Server.App as well - BUT - the members of a group (visible in WM) aren't showing up in the respective group if viewed at through Server.App?! What is going on here?

Recreate user account in Workgroup Manager, empty mailbox

We have OS X 10.3.8 Server version. Postfix mail server.
We have a user/account with email problems and a huge mailbox. He (user: gordon) had over 16000 emails in his mailbox (/var/spool/imap/user/gordon). All other mail users on this server work fine, including newly created user accounts.
Our solutions was to try and delete all mail from his mailbox via Terminal. This did not seem to decrease the size of his mailbox. Our next idea was to delete this user in Workgroup Manager and then re-created this user. Hoping to created an new mail setup and empty mailbox. This idea failed aswell.
How does one basically purge an old account/user in Workgroup Manager, and then, recreate that same user name and effectively recreate the user with a new account, including a new/empty mailbox?
Mac OS X (10.3.8)

cyradm is not part of 10.3.x
To use it you would have to install it first. See here:
http://www.afp548.com/article.php?story=20040814204411280&query=cyradm
And then follow the instructions given beforehand.
Having said that, your issue can be resolved differently. You deleted all mail manually in the file system (not a good idea, but what is done is done). So the mail is actually gone. What you are seing is Cyrus' index. Since you deleted manually the index didn't get updated. To get rid of the problem either reconstruct that users mailbox throgh Server Admin - > Mail or alternatively run:
sudo -u cyrus reconstruct -r user/gordon (assuming that's the user's name)
Alex

How to create a new account and copy all settings?

I think my main user account is corrupted. So I want to create a new account and copy all of my settings, files etc..and more than likely piecemeal just incase my settings are what is corrupted. That way I can isolate the problem.
I don't plan to delete the main account until satisfied and I also have my Time Machine backup plus my SuperDuper backup.
I can/should be able to figure out how to create the new account, but I am very unclear on the best/easiest approach to copy in my iTunes files and settings, applications(is this even an issue), address book, email, etc? I should be able to find most everything underneath my home account folders but what else am I missing here? I don't want to find out the hard way.
Please share some advice or perhaps a link/FAQ on how to approach.
Thanks in advance.
--Mickey

use this [link|http://discussions.apple.com/message.jspa?messageID=6185507].

My LAPD & kerboros service is stopped and workgroup manager is not working either

Hi I had to restore from a back up a while ago but the workgroup manager seems to have lost all of the passwords and the LAPD & kerboros service wont start in th open directory mater.
I have been told that if I make the opendirectory master a stanalone and then back to open dirctory master this will fix the problems.
Any advice for this server dimwit?
Cheers
Bricko

Have you tried demoting and repromoting? It usually does do the trick. Also, yes, all of the passwords were erased, they do not get saved. They will all need to be reset to something generic, given out to all the users and then have them change their passwords to something personal via the web portal.

Difference between Profile Manager in Server v2.2 and Workgroup Manager - Mobility

Hello everyone,
I was wondering if anybody experienced mobility management with Profile Manager in Server v2.2 ? It is known that mobility management in Profile Manager is broken in previous versions of Server:
https://discussions.apple.com/thread/3637378?start=0&tstart=0
Does anybody know if mobility management has been fixed ?
Thanks for your help. Best regards.

I'd also like to know an answer to this. I'm managing a small network and don't have a test environment to stage things in. (This is needed as Profile Manager is WAY too unstable to production.)
I'm currently using WGM to look after Mobility settings and Profile Manager for everything else. I used this setup after I got the same reply as per thread 3637378. It would be nice to have the settings all in once place!

Server Admin and Workgroup Manager is sloooow

When running Server Admin or Workgroup Manager directly from my client macbook, connected to one of our leopard servers, it is painfully slow. I mean painfully.
It takes a minute to connect while I stare at this spinning wheel, some actions never stop spinning the wheel. Sometimes it just stops and everything is working great.
If I run the admin tools locally, connected through remote desktop its working much better, but can still be quite slow when connecting sometimes.
Any ideas?

I had a similar problem with a new xserve, setup with the factory pre-install leopard 10.5.2 it defaults to the server FQDN (myservername.com) for server admin with no DNS setup it takes ages to finaly get SA to open because it can't resolve itself.
deleting server.myservername.com once SA fianaly responds it reverts to server.local and responds
once DNS is configured correctly, no more issues.
this particular server went on to develope regular OD crashes and AFP problems with OD crashing and when users logged in/out nd AFP having to be restarted when OD crashed and I decided to rebuild it.
the DVD was 10.5.1, on bootup it was far worse than the factory pre-install when opening SA
I upgraded to 10.5.2 combo before turning on any services , even when I got DNS working it was slow to respond nothing like as bad as without DNS but still slow. DNS checked out fine. The only way I could get it to respond normally was to add the domain name to Search domains in network preferences.
something I did notice with the DVD install in server setup the local address defaulted to .private SA expects .local and the server name wasn't automatically filled out when I entered the server FQDN. the factory pre-install automaticly filled out the server name and used .local
there is an edit button near the server name once you click on that it changes the name from .private to .local
I didn't notice the .private the 1st time around and with the .private things where far worse. SA wouldn't respond at all even with 127.0.0.1

Imovie 8 and Workgroup manager

Hello
I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

Hello
I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

Problem with home directories NOT in Users and Workgroup manager

I am setting up a Leopard server (10.5.3) with the users directories in /h1. This is mounted as /Volumes/h1.
It is exported under AFP as /h1.
When I try to get Workgroup manager to create a home directory, I can enter the home directory as:
afp://quattro.innocon.com/h1
path is 'user'
Full path is:
/Network/Servers/quattro.innocon.com/Volumes/h1
However, when I try to log in as this this user, it says that the directory /Network/Servers/quattro.innocon.com/h1/username does not exist.
I cannot seem to figure out why the 'Volumes' part of the full path is being lost.
Any ideas on how to get this right?

have you checked to see if /Network/Servers/quattro.innocon.com exists?
I'm having ALOT of issues with automount not picking up on the mount-maps set by Open Directory.. If anyone has any solutions on this it would be great.

Touchpad account and "desktop manager"

Hello,
I am trying to delete an account on my wife's new touchpad that was put on by the retailer. Can anybody tell me how to do this please?
Also is there a desktop manager for the Touchpad like there is for Blackberry and iPad, and if there is can you tell me where to get it please?
Thanks for your help.
Dave
Post relates to: HP TouchPad (WiFi)

Do a full erase using the Device Info app > Reset Options > Full Erase. Then your wife can create her own account.
By desktop manager, I assume you mean a desktop app to let you manage the TouchPad from your desktop computer? For that, just plug TouchPad into your desktop using the included USB cable and select USB drive on the TouchPad. Then use Windows Explorer to manage its contents.
If you are looking for a TouchPad app to manage its contents by itself, search the app catalog for file manager.
smkranz
I am a volunteer, and not an HP employee.
Palm OS ∙ webOS ∙ Android

AD accounts and workgroup manager settings

Similar Messages

Maybe you are looking for