Mac os x 10.7 joining to windows 2008 domain

I recently started a project to understand MAC functionality in a tradtional WIndows domain. I seeking instruction to add my MacBook Pro to our Windows 2008 domain. Thanks in advance!
-r1cw3b

I have verified every required settings closely and had it cross checked over and over again with the network administrator himself, every settings was in place but when i tried to bind with the domain it returns server not found.
I also ping the server and it works....i verified the RJ45 cable...all is fine.
i tried updating from 10.7.3 to 10.7.4 but the problem persists.
Infact originally i had to bind the Mac OS X 10.7.3 and 10.7.4 to a Windows Server 2008 Standard SP2, it didn't worked then afterwards i tried to bind them to a Windows Server 2008 R2....it worked on 2 but on the third it didn't.
So does anybody have an idea or can anyone confirm me if Windows Server 2008 Standard SP2 is compatible with Mac OS X 10.7.4???

Similar Messages

Arch Samba - Windows 2008 Domain

I have made the thread bellow thinking i solve my problem giving access on FTMG...but unfortunately nope...
https://bbs.archlinux.org/viewtopic.php?id=107350
My Situation:
3 Servers on Windows 2008 Domain (Example: 192.168.1.1 / 2 / 3)
1.1 - DC
1.2 - Exchange
1.3 - ISA FTMG (Gateway to all servers)
1 Arch Server for Backup (Samba Share PUBLIC) - 192.168.1.4
And my problem is annoying at least, i go to one of my windows 2008 servers and push on explorer \\192.168.1.4\Backup and sometimes fully work without any problem... and another times (let's say 5 minutes after i push again) and:
Network path could not be found
or
xx.xx.xx.xx is not setup to establish a connection on port "File and Print Sharing (SMB)"
BUT FROM THIS WINDOWS 2008 SERVER IT PINGS 192.168.1.4
AND
TRACERT GO DIRECTLY TO 192.168.1.4
And if i try and try eventually it will work again.....can't damn understand what's going on with this.....
On ISA I gave FULL ACCESS to my servers to go where the hell they want and even so......
Thanks in advance for all the help....yep i need it.
Sniff

KimTjik wrote:
I'm sorry I didn't know that this wasn't covered in the Wiki. When I get some time I'll probably add something about. No neither of those links are correct. You already have one DC, a native Windows server, and the second one isn't necessary (you don't need to join the whole Linux workstation to the domain, just the Samba service; the Samba service will with hostname be recognized as a stand-alone server).
In lack of an appropriate Wiki entry Samba's own How-to is better: http://www.samba.org/samba/docs/man/Sam … ember.html
Look for this section: "Joining an NT4-type Domain with Samba-3"
Even that How-to might be confusing since it covers all kinds of configurations at the same time. What you need, as far as I can understand your description, is only what's written in that section.
Start with the strings in smb.conf for domain, password server (in your case probably the DC itself) and security set to domain. Restart samba and the you need to know an administrator account (user and password) and fill it in to the command example shown, e g "net rpc join -S DOMPDC -UAdministrator%password". If everything works you should get confirmation about it. You could also double-check the AD on the DC and see if the Samba server is added.
See if you get this to work.
OK, sorry for the delay in my answer but i was traveling and couldn't test the above in the production environment.
I have add the backup server to the domain successfully but that was not the problem.
Now i have full details and maybe you could give your opinion:
FTMG (Forefront Threat Management Gateway)
SWITCH LAYER 3
SERVER BACKUP----------------------SERVERDC---------------------------SERVEREXCHANGE
THE PROBLEM is that if the DC have a share or exchange, everything works ok \\dc or \\exchange, but if you try to connect to the share archserver the connection drop quite often \\archserver
WHY? Because after some trace in FTMG, the microsoft firewall consider that the archserver is doing spoofing, yes is on the same network as all servers, same domain as above help, trusted...etc.
SOLUTION? First i give permissions on the firewall to the archserver (ALLOW ALL /PROTOCOLS ETC), but even so the FTMG was intercepting all the requests to the archserver and still consider him spoofing...odd enough no??!! By the way the FTMG Server control all network, is the gateway to all servers and switching.
Are you thinking to change the gateway to archserver or just don't put any....yep same result, FTMG catch archserver still.
I gave up and come with my actual solution (VLAN or BACKUP NETWORK), all servers with a extra ethernet card dedicated to the backup network or vlan just to backup without the firewall going there to trace anything.
And that's it....
But my question to you all is, everytime that we have a linux server (share) together with FTMG in same network do you have the same result, it seems to me like FTMG have something like: IT'S LINUX / GET BLOCKED.
Thanks for your help and patience regarding my answer.
TD (Sniffer)

CERT_TRUST_IS_NOT_SIGNATURE_VALID when installing a 3rd-party cert in Windows 2008 Domain Controller

Hello,
I'm facing with a problem while trying to install a 3rd-party digital certificate on a Windows 2008 Domain Controller.
Basically, I'm following this TechNet
http://technet.microsoft.com/en-us/library/cc783835(v=ws.10).aspx
1) I did create the file Reqdccert.vbs on the Domain Controller
2) then I did generate the inf file
cscript reqdccert.vbs DomainController E
3) and then I generated a certificate request
certreq -new AD.inf AD.req
4) also I've imported RootCA and SubCA into the Certificate Store of the DC
5) I got a signed certificate from our 3rd-party CA running on Windows 2000
6) when importing the certificate I get the below error
C:\>certreq -ACCEPT ad.p7c
Certificate Request Processor: The signature of the certificate cannot be verifi
ed. 0x80096004 (-2146869244)
Here is the verbose log from CAPI2:
+ System
- Provider
[ Name] Microsoft-Windows-CAPI2
[ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}
EventID 11
Version 0
Level 2
Task 11
Opcode 2
Keywords 0x4000000000000003
- TimeCreated
[ SystemTime] 2014-06-13T09:33:02.604870500Z
EventRecordID 304
Correlation
- Execution
[ ProcessID] 1700
[ ThreadID] 3032
Channel Microsoft-Windows-CAPI2/Operational
Computer ad.eac.igs
- Security
[ UserID] S-1-5-21-4171312682-976198474-2692596432-500
- UserData
- CertGetCertificateChain
- Certificate
[ fileRef] 4DA02894B4AFB76F8D6B8722A96A3444041573C6.cer
[ subjectName] ad.eac.com
- AdditionalStore
- Certificate
[ fileRef] 691847ADD248AEB8579462249B063A1555716B21.cer
[ subjectName] SubCA
- Certificate
[ fileRef] 4DA02894B4AFB76F8D6B8722A96A3444041573C6.cer
[ subjectName] ad.eac.com
- Certificate
[ fileRef] 0175DDA12776ED8CA4657E921E9AE3C6B0698F71.cer
[ subjectName] RootCA
ExtendedKeyUsage
- Flags
[ value] 0
- ChainEngineInfo
[ context] user
- AdditionalInfo
- NetworkConnectivityStatus
[ value] 1
[ _SENSAPI_NETWORK_ALIVE_LAN] true
- CertificateChain
[ chainRef] {0B005F9F-F15B-4FE2-A630-7BBEE6AB5C0A}
- TrustStatus
- ErrorStatus
[ value] 8
[ CERT_TRUST_IS_NOT_SIGNATURE_VALID] true
- InfoStatus
[ value] 0
- ChainElement
- Certificate
[ fileRef] 4DA02894B4AFB76F8D6B8722A96A3444041573C6.cer
[ subjectName] ad.eac.com
- SignatureAlgorithm
[ oid] 1.2.840.113549.1.1.11
[ hashName] SHA256
[ publicKeyName] RSA
- PublicKeyAlgorithm
[ oid] 1.2.840.113549.1.1.1
[ publicKeyName] RSA
[ publicKeyLength] 2048
- TrustStatus
- ErrorStatus
[ value] 8
[ CERT_TRUST_IS_NOT_SIGNATURE_VALID] true
- InfoStatus
[ value] 4
[ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true
- ApplicationUsage
- Usage
[ oid] 1.3.6.1.5.5.7.3.1
[ name] Server Authentication
- Usage
[ oid] 1.3.6.1.5.5.7.3.2
[ name] Client Authentication
- Usage
[ oid] 1.3.6.1.4.1.311.20.2.2
[ name] Smart Card Logon
IssuanceUsage
- ChainElement
- Certificate
[ fileRef] 691847ADD248AEB8579462249B063A1555716B21.cer
[ subjectName] SubCA
- SignatureAlgorithm
[ oid] 1.2.840.113549.1.1.5
[ hashName] SHA1
[ publicKeyName] RSA
- PublicKeyAlgorithm
[ oid] 1.2.840.113549.1.1.1
[ publicKeyName] RSA
[ publicKeyLength] 2048
- TrustStatus
- ErrorStatus
[ value] 0
- InfoStatus
[ value] 101
[ CERT_TRUST_HAS_EXACT_MATCH_ISSUER] true
[ CERT_TRUST_HAS_PREFERRED_ISSUER] true
- ApplicationUsage
[ any] true
IssuanceUsage
- ChainElement
- Certificate
[ fileRef] 0175DDA12776ED8CA4657E921E9AE3C6B0698F71.cer
[ subjectName] RootCA
- SignatureAlgorithm
[ oid] 1.2.840.113549.1.1.5
[ hashName] SHA1
[ publicKeyName] RSA
- PublicKeyAlgorithm
[ oid] 1.2.840.113549.1.1.1
[ publicKeyName] RSA
[ publicKeyLength] 2048
- TrustStatus
- ErrorStatus
[ value] 0
- InfoStatus
[ value] 10C
[ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true
[ CERT_TRUST_IS_SELF_SIGNED] true
[ CERT_TRUST_HAS_PREFERRED_ISSUER] true
- ApplicationUsage
[ any] true
- IssuanceUsage
[ any] true
- EventAuxInfo
[ ProcessName] certreq.exe
[ startTime] 2014-06-13T09:32:53.369Z
[ endTime] 2014-06-13T09:33:02.604Z
[ duration] PT9.232850S
- CorrelationAuxInfo
[ TaskId] {A8DC7725-FEE9-4E09-905A-FEFF7FAE9B8B}
[ SeqNumber] 27
- Result The signature of the certificate cannot be verified.
[ value] 80096004
Any idea what the problem is?
Thanks in advance,
Davide.

One common reason for that error is that the wrong SubCA certificate had been imported accidentally - e.g. an earlier 'version' of that SubCA with the same Subject CA name but a different key. In this case the validating client will try to build a chain
based on name only but finally the signature check fails.
Could you cross-check if the extension Authority Key Identifier in your DC certificate is the same as the field
Subject Key Identifier of the SubCA certificate? (These are typically hashes of the keys though it is not standardized - it should be a unique string characteristic for the CA)
For the client cert. CERT_TRUST_HAS_NAME_MATCH_ISSUER is indicated in your log - thus Isser name in client cert. matches Subject Name in CA cert, but we don't know about SKI/AKI.
Elke

Adding Administrative Templates (.admx) for Windows 8 and Windows Server 2012 to my Windows 2008 domain

Hi,
We have a Windows 2008 domain, and now we need to configure IE 10 options, so we have to import the Windows 8 / 2012 ADMX files. Can we just do the following:
1. Download
http://www.microsoft.com/en-us/download/details.aspx?id=36991
2. Unzip it and copy the .admx files to c:\Windows\Sysvol\<domain>\policies and create a directory called policydefinitions
3. Then just re-open Group Policy Management ?
Correct way or not? Will this have any implication on network or any old GPO.
Thanks for reply
/Regards Andreas

> But i cant seem to find "Check for publisher`s certificate revocation",
> so how can i disable this. I did see a url to create a ADML file, but
> this was very old.
Doesn't exist - only "Server certificate". The old URL might still be valid.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

SCEP 2012 Client in Windows 8 / 2012 - in Windows 2008 Domain- Not Syncing -/ Not Compatiable

Dear All ,
With lots of Hardship I had installed SCEp 2012 in Windows 2012 Virtual machine in WIndows 2008 Domain.
SCCM 2012 Server in Windows 2008 Server with Sql 2008 was - performing well and there was no issues until our COmpany planned to Convert the Windows 2008 Server to Windows 2012 Server ( AD is 2008)
WSUS is not Fully synching with SCCM 2012 ( previously it was )
Software Updates not pushing properly and to top all the SCEP client is not compatible with win 8.1 pro or win 2012 server
Error: Failed to download content id 16787046. Error: Access is denied.
Package:
Success: The software updates were placed in the existing package:
• Deployment Package(JUN2014)
Software updates that will be downloaded from the internet
Error: Update for Forefront Endpoint Protection 2010 Client - 4.1.522.0 (KB2780435)
Errors
Failed to download content id 16787046. Error: Access is denied.
Language Selection:
English
But the service account has full access - administrative rights and the administrator of the system
please advise on this

Hi,
All the software updates downloaded failed?
Are there any errors in PatchDownloader.log? If you use Automatic deployment rule, please also check ruleengine.log.
Please add the account with Full rights to the source share (both NTFS and Share permissions) where the Deployment Package is located.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Is it possible to join a Windows server domain?

Hi, We have a mixtures of Windows and Mac clients at school. We have recently had installed a Windows Server 2003. The windows all work well - but other than as a file server can I expect more from the macs? Is it possible to join the windows domain - and log in as different users so that different network drives are mounted at log in? Thanks in advance!

Hi, We have a mixtures of Windows and Mac clients at
school. We have recently had installed a Windows
Server 2003. The windows all work well - but other
than as a file server can I expect more from the
macs? Is it possible to join the windows domain - and
log in as different users so that different network
drives are mounted at log in? Thanks in advance!
Yes. The server does not have to be running Services for Macintosh.
If the server is running Active Directory, you'll have to work with the windows admin people to create the AD account.
Otherwise, you'll just hae access to the shares.
On the Mac, I think the AD options are under Directory Services.
To map drives at login, the easiest way is to write an Applescript, save it as an application, and add it as a login item.
I can't recall the exacy syntax, but for each drive, the script should look something like this:
Tell Application "finder"
try
mount "smb:\\windows.server.ip.address\sharename"
end try
You will get a user id/pw/domain prompt for each share.
For e-mail, assuming they use Exchange, you'll need exchange server 2000 SP 2 or higher with OWA, IMAP, and LDAP active on the mail server to be able to access mail through Entourage or Apple mail.
Otherwise, you'll be limited to Outlook Web Access.
Printing: Standard IP,LPR, or appletalk printer setup.

Windows 7 64bit and Joining Windows 2008 domain

just installed Windows 7, 64bit. When I tried to join it to the domain I'm getting "network path not found". I've tried to manually add a host record for the computer in DNS but that doesn't work. I've even set the IP static and then registered
it in DNS. When I do this, I see the host record with the IP (static) but still can't join to the domain. What's the problem and how can I resolve it?

Hi HawaiiKai,
What is your Server operating system version, Windows Server 2003, 2008 (R2) or 2012 (R2)?
You may take a look at the KB article below:
"Network Path Not Found" Error Message When You Try to Add Workstation to Domain
Also, please make sure you have Client for Microsoft Networks
checked on the NIC properties.
Or you may consider to update the NIC driver.
A discussion thread here:
Cannot join domain "the network path was not found"
If issue insists, in case there is any Domain configuration issue, you may also seek help at the forum below:
https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverDS
Best regards
Michael Shao
TechNet Community Support

Joining a Windows 2000 domain

Can I join my Sun Solaris 8 server running Samba to a Windows 2000 domain so that all the users that logon or use shares will authenticate thru the domain controllers with their Win accounts?
I dont want to create 1500 Solaris accounts.

there is a sun product called Sun PC Net Link that could help you
synchronazing user accounts in Windows env. and Solaris
you can map the accounts from one env. to the other.
we use this product since many years and have migrate fm
windows NT to Windows 2000 Terminal Server without major
problems, including user maps.
good luck ...
[email protected]

Join ipad to windows 2008 domain?

Can I input the Ipad in one domain with windows 2008 x64?
If i can, what do I need to do ?

Hi,
Thanks for your posting.
Have you check this article?
Migrate windows users profiles from a workgroup to a domain
http://it.mzedan.com/2012/02/15/migrate-windows-users-profiles-from-a-workgroup-to-a-domain/
There is a similar thread has been discussed:
Transferring from Workgroup to Domain - Keeping user profile
http://social.technet.microsoft.com/Forums/windowsserver/en-US/fac17d6a-3c1b-4188-913e-ac2ec45b3ad6/transferring-from-workgroup-to-domain-keeping-user-profile?forum=winservergen
And this article is talking about non-domain USMT for windows server 2003/2008
http://social.technet.microsoft.com/Forums/en-US/fe799f52-183e-4953-b894-92415f6dcd82/nondomain-usmt-for-windows-server-20032008?forum=winserverMigration
Hope this helps.
Regards.
If you have any feedback on our support, please click
here
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Issue with Installing Oracle 10g R2 on a Windows 2008 Domain Controller

I'm assigned a evaluation task for my company. The task invoke to install oracle in my Domain Controller Server.
I got "ORA-12560: TNS:protocol adapter error" when I installed ORACLE 10g R2 for Win2K8 on my Windows 2008 (a Domain Controller Server). It happened in the create predefined database period.
I tried to google and noted that there are some RUMOS say "We cannot deploy ORACLE on a Domain Controller, It's impossible"
Is this true? Please, Please advise!
Thansk,

This is a link to a same issue
Creating instance oracle 10.2.0.4 on Windows 2008 32bit

Can i add a windows 2008 domain controller in a open directory ?

i want to add an windows 2008 r2 domain controller to a open directory .
is this possible, and replicated all users to active directory?

Yes, You must establish a two-way trust between the central forest and user forests to enable distribution group expansion when groups from user forests are synchronized as contacts to the central forest.
Also you can refer below link
http://technet.microsoft.com/en-us/library/gg670909%28v=ocs.14%29.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical

Windows 2008 domain important security update

Dear All,
We have windows 2008 server X64 Enterprise edition SP2 . we implemented domain controller it's working fine . last 3years we near updates any important patches and security update . we would like to update important patches and security update . please let
we know which are the important security updates and important patches ..
We are waiting for your valuable tips.
Regards
Subash

Every Critical and Security patch is important. There is nothing like important ones, if the server role is critical then you can install windows Server 2008 in your test environment and deploy the patches and check the stability. You can also check each
update and read its description and then install it.
Prajwal Desai, http://prajwaldesai.com

Can A Windows 2000 Client Join A Windows 2012 Domain ?

I have set up a Server 2012 VM that I have configured as a DC. The desktop environment consists of Windows 7, Windows XP and a few Windows 2000 machines. All desktops can JOIN the 2012 domain, but when I try to add domain users to any of the
Windows 2000 (SP4) workstations, it fails with the error "The trust relationship between this workstation and the primary domain failed".
Unjoining the workstation from the domain (or going into ADUC and deleting the Win 2000 computer from the domain) and trying again yields the same result. I do not have this problem when the Windows 2000 machines are joined to a Server 2008 R2 domain.
At this point, I'm leaning towards setting it up as a 2008 R2 DC, and moving to a 2012 DC once we have weaned ourselves off of the Windows 2000 desktops. Is there any hope of getting things to work with a 2012 DC from the start ?

Hi,
Based on my research, Windows 2000 client is not supported for Windows 2012 DC.
Windows client and Windows Server operating systems that are supported to join Windows Server 2012 domains
The following Windows client and Windows Server operating systems are supported for domain member computers with domain controllers that run Windows Server 2012:
Client operating systems: Windows 8, Windows 7, Windows Vista, Windows XP
Computers that run Windows 8 are also able to join domains that have domain controllers that run earlier version of Windows Server, including Windows Server 2003 or later. In this case however, some Windows 8 features may require additional configuration or
may not be available. For more information about those features and other recommendations for managing Windows 8 clients in downlevel domains, see
Running Windows 8 member computers in Windows Server 2003 domains.
Server operating systems: Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows Server 2003 R2, Windows Server 2003
Cataleya Li
TechNet Community Support

Migration of a Windows 2008 Domain to 2012 with SCCM 2012 installed

Hey there,
i have been requested to migrate two 2008 Domains to 2012 with a possible merge.
Done this many times, but in this case i have a SCCM 2012 installed in the Environment.
SCCM is not covered by me, but i would like to have some aditional Background on this...
Are there any Special Points to give Attention to?
Any Hints or Ideas on this?
Best regards
Chris
btw: i still found, that i am not "allowed" to migrate the sccm itself, but Need to reinstall it...

i have been requested to migrate two 2008 Domains to 2012 with a possible merge.
Done this many times, but in this case i have a SCCM 2012 installed in the Environment.
btw: i still found, that i am not "allowed" to migrate the sccm itself, but Need to reinstall it...
Lets say you have two domains - Domain 1 and Domain 2. Both have W2008 DCs. SCCM 2012 has been deployed to Domain 1.
You could just upgrade to W2012 DCs in Domain 1, then migrate Domain 2 resources to Domain 1.In this way SCCM is unaffected.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Adding mac in Windows 2000 domain

Hello, I need add a mac OS 10.3.9 in a windows 2000 domain,
for sharing files and printers. Is possible??
Thanks, Diego

Hi dbeihswingert try these documents
http://www.wazmac.com/wazza/networking/networkpages/basic_sharing/networkintegration.html
especially
Macs to a Win Domain (pdf - 250k)
Configure OSX 10.3.3 so Macs can authenticate with Active Directory, and store their home folders on a Windows 2000/3 server.
I have found this to be a good resource.
Cheers.

Mac os x 10.7 joining to windows 2008 domain

Similar Messages

Maybe you are looking for