Joining a Mac OS X server to a Windows Domain

Hi all, new to the forums here and fairly new to a Mac environment. I'm looking for some guidance and assistance with how to join a Mac Server to an existing Windows domain. My questions are what kinds of options do I have for setting up a server that will be part of the Windows domain and also hosting multiple Mac clients. I looked briefly at the server options like stand alone, member server, domain server, etc. I'm having trouble distinguishing what we want the server to be defined as. I'm also wondering what are the steps I'll need to take in order to join the system to the Windows domain. Any help in this matter would be greatly appreciated!
-Terry
Mac OS X (10.4)

You use the Directory Access app found in the /Applications/Utilities folder to join the computer to the domain. Once there you can see what options you have.
You also may want to browse http://www.macwindows.com and/or post further questions you have in the Windows Compatibility forum:
http://discussions.apple.com/forum.jspa?forumID=687

Similar Messages

Slow transfer speeds between Mac Pro and Shared Drive on Windows Domain

Hi Guys,
Getting really slow transfer speeds when I try and transfer a file from a Mac Pro to a shared network drive on one of our Windows 2003 Servers.
The Mac Pro is logged on to windows domain. This data is transferring via our hard network, not via wireless. Not having any other transfer speed issues on any other PC's.
For example an 8mb file took around 45 mins.
Hope you can help. Many Thanks.

I saw this at a site where they were using DFS with Server 2003. When the few Mac's they had connected to the actual server and uploaded the file it was okay. But when it was sending the file via the \\DFS_node\share_name the Mac took heaps longer for the same file. Watching the Activity Monitor > Network monitor you could see gaps with the data transfer, as if there was some pausing between packets. A pcap showed that there was constant DNS requests coming from the Mac, even after the connection to the share was made. The same wasn't happening when the connection via SMB was directly to the actual file server. As there was only a few Mac on site they left it with the direct connection but were getting an MS specialist in to look at it. Never heard what happened with that one but you may want to try monitoring the packet transfer to see if the data movement is contstant or breaking. I'd also recommend getting Wireshark to monitor the transfer. You can compare upload to download and maybe even the transfer from the Mac to an MS workgroup share.

Mac mini file server on a windows network

I would like to run a mac mini server on a windows network.
Do I need a router or a switch? Does the mini support client data backups? Are the users & permissions setting robust and easy to use?
SMB is the protocol? It is my understanding that this is easy with xp but more difficult with windows 7, has this been resolved?
thanks

Might have better luck asking in the Lion Server forum.
https://discussions.apple.com/community/servers_enterprise_software/mac_os_x_lio n_server

Mac OS X Server Tiger and Windows XP SP2 (Yes I know not a good Idea)

Hi Everybody
I have an issue. It have setup all the windows services as is said in the apple guid and I can't get it to work.
It seams to be having trouble connecting to the server / finding the server. And guesses on why this mite be. I have had issues with the DNS on the PC's as well however it works fine on the Mac's.

Not very specific about your problem.
But I think it may because you need the Win clients to use the tiger server as a WINS box.
In your windows IP settings enter the ip of the server under 'WINS'
AlanP

Multi-server Environment without Windows Domain

Hi,
Has anyone had experience with installing SAP BPC in a multi- server environment without using Microsoft Active Directory as a domain. (ie just using local users for everything).
Do we need to create a domain in order in successfully install and use the BPC? If that is the case, which server is best suited to install the domain on?
Many thanks

Hi,
Do you have at least a domain for hosting your servers ? Without an administrative domain for computer and technical accounts I doubt you could even make BPC work in a multi-servers environment.
If you don't have a domain for your users, you may (but i will never recommend it), create all your users localy. But you will have to create them on all BPC servers with same name / same password. Password adminisration will be a real mess as you will have to change the password on all machine each time the user want to change it. And this will not be done by the end-user but by IT staff. Also, users will not be able to use Windows Integrated Authentication functionnality.
So basically, yes use a domain for computer and users. The most easy architecture is to use a single domain for both computer and users.
If you have to install a Windows AD, I would take a look at Microsoft white paper and KB. But I think that you have to dedicate at least 1 machine for it (best is to have 2 servers for fault tolerance).

How do I configure my Windows clients to talk to Mac OS X Server 10.6

We had a MacAuthority technician install the server software for us, but he did not configure the Windows clients to talk to the server. I have tried several approaches, all evidently wrong. Everything I have read says the Windows clients need "open directory" passwords, and he has set them up as "shadow passwords". Heaven only knows what else is messed up. Please someone step me through this -- I will set them up as new users and see if I can make it work that way.

What sort of a resulting configuration or environment are you seeking?
If you're looking to have your Windows clients access storage on your OS X Server and to not authenticate with your OS X Server system, then you can dispense with some of the configuration steps.
However if you're looking to have the same login everywhere (Windows and OS X), then requirements become somewhat more complex.
And which version(s) of Windows? Particularly if you have Windows 7, the options and requirements differ.
It's less common to have Windows configured to authenticate to OS X; it's more common to use Windows Server and its Activie Directory, either in isolation or in combination with an OS X Server in what's called a "magic triangle" configuration. Alternatively (if you do want to set up this direct authentication of Windows and OS X Server and Open Directory), then see Mac OS X Server: Alternatives to Windows NT 4.0 domain control (PDC) technology (HT4945); that uses pGina.
And before you proceed here with any work involving authentication, delegation or related tasks, launch Terminal.app from Applications > Utilities folder, and issue the following non-destructive command to verify your DNS is correct:
sudo changeip -checkhostname
You'll need to specify an administrative password when prompted. Proper local DNS services are central to getting any of this stuff to work, and this command will (non-destructively) indicate if DNS is correct or if there are issues or changes needed.
The OS X Server 10.6 documentation is available from Apple, and that can help provide you with some background in this topic. The 10.6 intro, 10.6 User Management, and 10.6 Open Directory would likely be worth downloading and skimming. Probably also 10.6 File Services, if that's part of your goal. (Running a server isn't quite as no-IT-required as might be hoped, unfortunately. And I don't know of a short cookbook for this stuff; the steps and configurations can vary, depending on your local requirements - apologies on pointing to the docs here.)

Joining Win2K3 Server/AD to a Mac OS X Server OD Master

Has anyone tried this setup?
Basically, we'd like to set up Mac OS X Server 10.5 Leopard to be an Open Directory Master, iCal Server, and LDAP server to some services such as subversion authentication.
We also have a need to have a Windows 2003 Server running Active Directory for Sharepoint Server. I'm having problems trying to bind a Windows Server to an Open Directory Master (My DNS is set up along with the appropriate SRV records as documented by:
http://www.microsoft.com/technet/archive/interopmigration/linux/mvc/cfgbind.mspx ?mfr=true
I configured BIND manually because the OS X DNS Admin app doesn't seem to be able to set up SRV records properly nor have a way to enable secure dynamic updates".
Whenever I try to bind the Win2K3 Server to the Open Directory, it always fails. Does anyone know if it's possible to join a Win2K3 server to the Open Directory Master in a way that fools the Windows server into thinking the Mac is an AD server? One important note: I have NOT enabled Windows PDC on the Mac. which is based on NT and not AD.

Hello,
I'm sorry I don't have an answer to your post, but I just wanted to say I am trying to setup exactly the same thing.
If I manage to get it working, I'll post and let you know.
The one thing I can add is that when I was setting up a W2K3 server to use a linux based DNS server, I had to add "check-names warn;" to the Bind config file.
The problem is that the DNS names Microsoft try to register break certain naming standards, and I set it to give a warning instead of a fatal error.
I have no idea if that is relevant to your setup, but I know I needed to do it to get my Bind working with W2K3.

How do I effectively join the Macs to the AD?

Hi. First, I must qualify that I am NOT a network individual. Some of the research I've done, I've managed to follow, but I don't have the technical know-how to fully understand it all. I desparately need help, please.
I work in a medium-sized environment, about 50 PCs and we employ Windows Server 2003. I've been charged with making 10 or so Macs work in Active Directory. Our Mac users constantly run into expiring netword passwords every 30 days (extending this is not an option because of the nature of the work).
How do I effectively join the Macs to the AD and allow changes to network passwords from the Mac? So far, for every Mac users, I've used SMB to connect to server files/folders. But when the users' password expires, they are 1) not notified that their passwords are expiring and 2) are not able to change their passwords from their Macs when their passwords expires. I've tried binding my Mac to the AD and used a free software called ADMon to monitor my own expiring network password. And that's proving useless because it's monitoring the local password for the Mac instead of the network password.
Mac users are mostly on OS Lion, one Mac user on Snow Leopard.
I would really appreciate any help/advice you can provide.
Thanks!

AD is still broken with Lion as at 10.7.2. May want to read this thread to try the workarounds, mainly Page 5, while Apple sort it out.
https://discussions.apple.com/thread/3198558?start=60&tstart=0

How do I add a Mac to a Windows Server 2003 or 2008 domain?

I recently started working for a public school district that runs Windows Server 2003 and Windows Server 2008 R2. There are several faculty members, myself included, that would like to get their Macs onto the domain and capable of file sharing, printing to network printers, etc. I cannot find decent instructions anywhere. Could someone please point me in the right direction or give me some directions? It would be greatly appreciated. Thanks.

I'm also new to the MAC world - I trust you were able to join the MAC's to the domain - I finally figured it out. However, I have not been able to get the MAC's to save to the Windows 2008 server where I have student folders setup. Have you been able to do this? If so can share the info with us.
Thanks,
Steve
[email protected]
Newport School District

Joining a mac to an xserve

Hi All
Is there a way to join a mac to a xserve once you have completed the beginning setup?? Ie when you install leapard it asks you if you want to join to a server. But if you miss this can you do it later? If so how do you do it
Thanks
Daniel

I might be completely misremembering, but unless your network has a custom login script for your users, I'm not aware of any option to "join" a network server when you first set up Mac OS X. You're asked if you want to migrate data from another location, including another Mac, and you're asked if you want to set up a .Mac/MobileMe account, but I don't remember any option during setup to connect to a file server.
But in any case, you can mount a server at any time. Finder ->Go menu -> Connect To Server
Regards.

Mobile account login about 10 mins on mac os x server

Hi there!
I successfully created mobile user accounts. When I log-in from my power book the mobile user is created and synched. If I try to log-in on my G5 workstation where mac os x server is installed the log-in procedure takes about 10 mins. Logging in with local accounts is as fast as one would expect.
A look into system.log shows that there are problems to mount the users mount point. Please see:
Oct 8 22:40:25 sebastian kernel[0]: AFP_VFS afpfs_mount: /Volumes/Users, pid 1540
Oct 8 22:41:28 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: doing reconnect on /Volumes/Users
Oct 8 22:41:28 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:41:28 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:41:28 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:42:28 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:42:34 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: posting to KEA retry for /Volumes/Users delayCnt 6
Oct 8 22:42:34 sebastian KernelEventAgent[37]: tid 00000000 received VQ_NOTRESP event (1)
Oct 8 22:42:34 sebastian KernelEventAgent[37]: tid 00000000 type 'afpfs', mounted on '/Volumes/Users', from 'afp_005AoG3asllS001Eic06SdO0-1.2c00000b', not responding
Oct 8 22:42:34 sebastian KernelEventAgent[37]: tid 00000000 found 1 filesystem(s) with problem(s)
Oct 8 22:42:38 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:42:38 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:42:38 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:43:38 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:43:48 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:43:48 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:43:48 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:44:49 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:44:59 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:44:59 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:44:59 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:45:59 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:46:09 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:46:09 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:46:09 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:47:09 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:47:19 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:47:19 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:47:19 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:48:20 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:48:30 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:48:30 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:48:30 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:49:30 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:49:40 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:49:40 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:49:40 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:50:40 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:50:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:50:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:50:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: max reconnect time reached 622 > 600 /Volumes/Users
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: posting to KEA to unmount /Volumes/Users
Oct 8 22:51:50 sebastian KernelEventAgent[37]: tid 00000000 received VQ_DEAD event (32)
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: doing reconnect on /Volumes/Users
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: connect to the server /Volumes/Users
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Opening session /Volumes/Users
Oct 8 22:51:50 sebastian KernelEventAgent[37]: tid 00000000 type 'afpfs', mounted on '/Volumes/Users', from 'afp_005AoG3asllS001Eic06SdO0-1.2c00000b', dead
Oct 8 22:51:50 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Logging in with uam 10 /Volumes/Users
Oct 8 22:51:50 sebastian KernelEventAgent[37]: tid 00000000 found 1 filesystem(s) with problem(s)
Oct 8 22:52:51 sebastian kernel[0]: AFP_VFS afpfs_Reconnect: Log in failed 32 /Volumes/Users
Oct 8 22:52:51 sebastian kernel[0]: AFP_VFS afpfs_unmount: /Volumes/Users, flags 524288, pid 37
Did I miss something? Why can't I log-in my mobile user on the server machine?
Thanx in advance
Gerhard

Looks like Apple has decided that access to the root user is not a needed thing for most users. I called Apple and asked about this issue as I had just had it occur - and I was logged into terminal BEFORE update to 10.6.8 as root - after I was unable to do so -
Apple walked me thought this -
System prefs ---->Accounts -----> unlock ------>
Click on Network Account Server "Join" ----->
Choose "Open Directory Utility" -------> This opens directory utility window -----> Unlock lock at bottom.
Go to "Edit" Menu and choose "Enable Root user" ------> it will ask for password. ( only 1st time after 10.6.8 update)
Now you can log into the root user in your terminal.
You can disable the root user - this will prevent you from logging in as root in terminal.
I am not sure - but is there a security RISK here? The option to re-set the root password via the above method ( as an admin user) - but with out re-booting the machine and using the install DVD?
My 2 cents.

Use Open Directory on Mac OS X Server for Airport authentication?

Is it possible to set up an Airport Extreme network so that only people with user names and passwords in the Open Directory on my Mac OS X Server can access it?
I'm picturing a scenario where users would be prompted for the same user name and password they use for other network services when they attempt to join the wireless network.
Our Airport Extreme access point is connected to the second Ethernet port on an original-model XServe that's running Mac OS X Server 10.3.9 (soon to be upgraded to 10.4.x).

Is it possible to set up an Airport Extreme network
so that only people with user names and passwords in
the Open Directory on my Mac OS X Server can access
it?
I'm picturing a scenario where users would be
prompted for the same user name and password they use
for other network services when they attempt to join
the wireless network.
Our Airport Extreme access point is connected to the
second Ethernet port on an original-model XServe
that's running Mac OS X Server 10.3.9 (soon to be
upgraded to 10.4.x).
What you seem to be describing, is WPA2/Enterprise level security. This would require you to run some type of Radius Server on your XServe, and you would simply duplicate the name & password they use on the XServe on the Radius Server. BTW, this is considered one of the most secure methods of running a wireless network in the corporate world.
You will however, have to research Radius & it's requirements, as I have not yet implemented that on my own system. HTH.
Regards,
Albert
G4 QuickSilver01 OWC 1.47Ghz CPU 1.5GB RAM 740GB HDD Mac OS X (10.4.3) 17" Aluminum PowerBook G4 1.33Ghz CPU 1.5GB RAM 80GB HD

Mac OS X Server on Windows Domain with Server 2003 DC

Hello,
I work for a school based in Leicester and we have a full windows environment (server 2003) running about 300 XP machines and 22 macs connected to Active directory using a piece od software called Admit Mac.
Recently I went over to another school and to see there mac setup and how easy it is to image machines, subsequently we purchased a mac mini and installed MAC OS X Server on it. I want to be about to use this sever with Apple remote for the 20 macs we have by joining it to are domain and pulling the machines through using AD for Imaging etc.
Can this be done easily and what's your experience on the best way to go about doing it?
Any help would be fantastic partially if someone out there has done it!!

Hi
+. . . pulling the machines through using AD for Imaging etc.+
Not sure what you mean by this? Creating images similar to RIS files (on the mac platform they're called nbis) can only be done using the System Image Utility. You can use the application itself if you want or an admin mac with the Server Admin Tools installed. AFAIK the application can only be run on the mac platform.
I doubt if nbis can be 'served' by your DC either if this is what you meant?
You might get a clearer idea if you read the documentation:
http://images.apple.com/server/macosx/docs/SystemImaging_and_SW_Update_Adminv10.5.pdf
These links provide further information:
http://www.howtomac.co.uk/
http://www.edugeek.net/forums/mac/15175-how-image-os-x-netrestore.html
http://www.edugeek.net/forums/mac/28828-mac-os-x-creating-image-boot-drive.html
Apple provide further documentation here:
http://www.apple.com/server/macosx/resources/
Tony

Mac OS X server 10.5.7 users cannot logon

Any help. I just installed Mac OS X Server and add added my users with logon details. I joined my MacBook Pro to the server using Directory Utilities and the Server is running well. I even have the users name displaying on the logon window. However, when I try to login the users, the window shakes indicating incorrect password. I have tried going over adding users, providing access rights etc. but with no success. I was successful in joining my daughter's Mac Mini to the server, but was not able to login using other users' details. Can anyone help.

My bet's on an incorrect home folder location.
First things first. Make sure that the Sharepoint for the home folders is set up correctly.
You can double check this as follows:
In server admin: Select the server name right below where it says "Available servers"
Click the file sharing tab at the top.
Click the SharePoints button and the Browse button
Click on your desired home folder location in the file browser.
Below the file browser, click on the share point tab.
Make sure "Enable Automount" is checked.
Click the edit button.
Make sure the directory is /LDAPv3/127.0.0.1
Make sure the protocol is AFP
Make sure that Use for "User home folders" is selected.
Click okay and save your changes.
Now to workgroup manager.
Select your user and click the "Home" button
Make sure that there's a home folder location selected. (ie the line is highlighted)
Click the edit button. (it looks like a pencil)
It's get a bit tricky here...
Mac OS X Server/Share Point URL:
It should look like this: afp://server.example.com/Users (assuming you're using the users folder)
Path to Home Folder:
You should ONLY have the shortname of your user here.
Full path:
It has to look like this: /Network/Servers/server.example.com/Users/shortname
Note that I've put server.example.com where you should have the domain name of your server, and shortname where you should have the actual shortname for your user.
Clear as mud?
Hope it helps.
-Graham

How do I find my server address, directory domain or MAC OS x server?

I went into systerm preferences, then accounts, in Login Options it has Network Account Server (Join . .) when I hit Join it asks for my server address, directory domain or MAC OS X Server? Are these all the same addresses? Also how do I find mine? Is it an IP address. I just need a simple answer.
FYI I'm on a wireless network on Airport Extreme. I also have a MacBook Pro Lion 10.7.5 hooked up with this and my MAC. When I click on Network on the MacBook Pro Lion 10.7.5 Wi-Fi comes up instead of Airport Extreme. Do I even need to join the Network Account Server in Account Preferences? Thank you in advance if anyone can help me

Do I even need to join the Network Account Server in Account Preferences?
No. There is no network account server.

Joining a Mac OS X server to a Windows Domain

Similar Messages

Maybe you are looking for