Managed Preferences issue

I have an unusual problem. My managed preferences are coming down perfect from my server. I am running 10.6.6 on the server. 10.6.5 on the client machines. I'm not running any machine based policies, just user based. When I set one of the preferences (System preferences) to keep users out of the "accounts" and out of the "sharing", What happens is that is greys out on the client machines the "other" section in the system preferences. This is the only issue that I am experiencing, problem is that some software that we run (macaroni, keyaccess..etc) the preferences for them, sits in the "other" section. Any advice?

Hi
Did you apply the MCX on the Server itself? If you did try installing WorkGroup Manager on a client workstation that has those extra Preference Panes installed. You should then be able to access the Others section.
Installing WGM on a designated client admin workstation is the preferred way of applying MCX.
Tony

Similar Messages

Managed Preferences Issues

I'm working with a lab of old eMacs with 10.4.11 installed. They say their local Student accounts are currently managed by the Mac OS X Workgroup Manager application. I've checked our OS X servers, though, and they don't appear to be listed anywhere in their Workgroup Managers.
This wouldn't be a problem, except some of the computers are refusing to let me override the management settings. System Preferences just freezes up whenever I try to change them. Even if I disconnect them from the network, they still give the same error & freezes. On top of that, the few computers I've managed to override the managed preferences might be having their managed preferences changed by... something.
I have 2 questions:
1. How can I learn where an account's Managed Preferences are coming from?
2. How do I unlock/remove trouble Managed Preferences?

Hello Jeff
Simply as a reminder but In 10.4 and earlier that particular application was known as Directory Access. Perhaps OP does not realise this and is looking for something else?
I could be wrong but it seems to me OP is saying WorkGroup Manager is installed locally on each of the affected client workstations. In which case this will be locally applied MCX using the appropriate tools in WGM. This is something that's perfectly feasible and possible. I do it all the time in smaller (less than 10) OD environments when there's no need/budget for OSX Server.
If this is indeed the case then launch WorkGroup Manager on each workstation, dismiss the initial connection window - click Cancel - click on the Server Menu and select View Directories. You should then be looking at the local node with users listed. Authenticate as the local administrator and inspect what MCX has been applied to each local user. It's been a while but I'm not sure if you could apply MCX to local groups using this method? Depending on how this was set up you'd probably have to do this for each local account on each workstation in turn?
Additionally cached information for MCX may either be in/Library/Managed Preferences as well as the NetInfo Database. The NetInfo Utility can be found /Application/Utilities - the same place where you'll find Directory Access. Authenticate using the local admin and select the config container and delete anything to do with mcx that's listed. Alternatively you could use the command line utility "nicl" - similar to "dscl" - to achieve the same result. Restart afterwards into safe mode and on login empty the trash and restart again. You'd have to do this for each workstation in turn. If you have ARD available you could use this instead if you want to save yourself some leg-work?
Hopefully this will get things back on track?
Tony

Leopard/AD integration- Managed preferences in OD questions

I have issues and questions with “golden triangle” set up.
Leopard 10.5.7 Server (already found the serial number snafu of upgrading to 10.5.8, and backed up a notch)
I have followed the Bombich “Leveraging” guide and have gotten to where it appears things are supposed to be. Yet things are not working as expected:
DNS lookup works both ways.
My OD Server has been bound to AD.
enabled Kerberos SSO.
Klist –ke shows me lists of services services@ADkerberosrealm
When I do the read /Library/Preferences/com.apple.AppleFilServer kerberosPrincipal I see my ODservername@ADkerberosrealm.
So I Promoted server to to an OD master
Question: At this point is Kerberos supposed to be running on the OD server? It’s just using AD Kerberos info, not acting as an independent KDC at this point? It’s currently listed in Server Admin as not running.
Which may lead to my other issues:
Even though things appear to be setup correctly, and I can bind AD bound Leopard client computers (10.5.7) to OD,
Managed Preferences is a haphazard and frustrating thing.
If I add an AD/ OD bound client to a Computer group and manage say a few dock items- add a few, subtract a few for that group, no items in the client dock are removed, and sometimes(only sometimes) is an added item reflected in the dock.
Yet if I add a managed Login screen text Message- that shows up on the login screen.
Managing an individual computer instead of a group fares little better.
We need to manage groups of teachers on Mac clients with AD authentication by building location, and computer groups was the way that worked well in Tiger. But leopard clients didn’t play nice with the Tiger server. So I Upgraded (actually a clean install) to Leopard server and started from scratch to build an Leopard Golden Triangle with AD.
I am still at the point where it would annoy me but not inconvenience me horribly if I were to have to reinstall and start again, but as the start of school draws closer I’d R-E-A-L-L-Y like to get this working.
Any suggestions would be greatly appreciated.
Thanks In Advance

dvatech wrote:
If I add an AD/ OD bound client to a Computer group and manage say a few dock items- add a few, subtract a few for that group, no items in the client dock are removed, and sometimes(only sometimes) is an added item reflected in the dock.
Yet if I add a managed Login screen text Message- that shows up on the login screen.
Go back and check DNS. Make sure forward and reverse both work. If DNS doesn't work, MCX will not work.
sudo changeip -checkhostname
Kerberos needs to be running from AD, not OD. Also, as stated, you have to have OD first, then AD in your search path so it will use the MCX.
This is another issue I am dealing with. Not sure if this has been resolved. I was working on OS X 10.5.8 Server and had issues managing Computer Groups.
http://www.afp548.com/forum/viewtopic.php?showtopic=23022
Message was edited by: chrisjuno

10.5 Client refuses to authenticate Kerberos or obey managed preferences

I am sure this has come up time and again, but a search in the forums has not come back with a work around.
I am running Tiger Server 10.4.11 as an OD master serving up portable accounts in a mixed Tiger and Leopard Client Environment. I just did a Leopard upgrades on two MacBooks that were previously bound to the OD server when running Tiger.
Upon completing the upgrades I have found two things:
1) Local and network users working on the laptops are no longer being challenged for a kerberos ticket to authenticate to network shares served up by the 10.4 server
2) Managed preferences for users as well as the clients are no longer being obeyed by the Leopard upgraded clients.
Everything works as it should on my Tiger Clients connecting to the server.
I have flushed the kerberos plists and rebound the Leopard clients to no effect, except to see some managed preferences on the login screen that somehow were honored in the upgrade be rolled back to factory defaults.
I know that Apple has made a lot of changes in Leopard, but is there any known work around to get Leopard to pull kerberos tickets from the server and obey managed preferences? I am not yet ready to make the upgrade to Leopard server with a stable server environment already in place.
Seems to me there should be some sort of workaround.
Help!
TIA,
Art
Message was edited by: MacWay

Turns out it was a time synch issue. I discovered this without any help from the forums.

Client Replaced - Managed Preferences no longer working

An iMac on my network came down with a hardware problem, so I replaced it with a different unit. I removed the computer from Workgroup Manager, gave the second one the same name and re-bound it to OD. Workgroup Manager can see the system in the Computer List, and I can add it to the Computer Groups I need, but the managed preferences of the group don't push out to the new system. I've since tried renaming it, but the problem remains.
The groups are working with all the other Macs that belong to them and the new unit is bound in the exact same way - is there some residual of the old machine that OSX server isn't liking? I've been pulling my hair out over this one.

Hi
If you've had the logic board replaced the new board will have a different MAC address - obviously. Managing hardware using Computer Lists is actually done using the MAC addressess (ethernet hardware address). Its not enough to name it the same. You have to remove it completely from the Computer List and browse for it again. Better still make a note of the new MAC address and manually add it.
You can find the MAC addresses (as well as the IP addresses) of any networked mac/pc/printer etc by issuing:
ping 192.168.x.255
Or whatever IP address range you are using. Let it run for a few seconds. Use Control C to stop the ping and issue:
arp -a
This should list all IP addresses and associated MAC addresses. If you keep a list of which client computer name is associated with which IP address and MAC address then you should have a clearer picture of your network topology. This is better achieved if the Server is also the DHCP Server.
Tony

Server 2012: Remote desktop licence manager not issuing licences

Hi,
I am battling with an problem which i cannot seem to resolve and no other forums actually come to a conclusion on how to resolve this problem!
I have a windows server 2012 server which is NOT part of a domain.
I have installed Remote Desktop Services and also installed the Remote Desktop License manager and i just cannot get the license manager to issue cals when users connect remotely via RDP
I have installed an extra two CAL's and tried using them as both a "Per User" and also "Per Device" but still does not work.
I have now run out of my grace period and cannot connect to the server at all
I have also tried changing some gpo's with no luck,
Computer Policy -> Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Licensing
"Use the specified RD license servers" = myservername
"Set the Remote Desktop licensing mode" = Per User
How can i fix this?
Thanks

Hi,
Thank you for posting in Windows Server Forum.
Have you seen that you have activated RDS License server before installing CAL?
Please check that the License Server should be part of ‘Terminal Server License’ group in Active Directory Domain Services. You can also configure RD License server manually by powershell commmand. Please check below article for information.
RD Licensing Configuration on Windows Server 2012
http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx
In addition, please install below Hotfix and verify the result.
No RDS license when you connect to an RDS farm in Windows Server 2012
http://support.microsoft.com/kb/2916846
Hope it helps!
Thanks.
Dharmesh Solanki

Solaris 9, Solaris Management Console ISSUE

Solaris 9, Solaris Management Console ISSUE
I have Solaris 9 installed and I am unable to use the Solaris Management console.
I have managed to start it:
/etc/init.d/init.wbem start
/etc/init.d/init.wbem status -> shows it's running
But if I try browser with the link http:// host:898, I have got the following error:
"A web version of the Solaris Management Console is not available at this time."
any Idea why?

Are you running Trusted Extensions? What patch cluster are you on? What toolbox are you opening?

Cannot get the past dialogue box to open in illustrator since upgrading to Yosemite. Click it but nothing happens. Also File Open works intermittently. Is this a finder preference issue?

Cannot get the past dialogue box to open in illustrator since upgrading to Yosemite. Click it but nothing happens. Also File Open works intermittently. Is this a finder preference issue?

one of those days --- it's the PLACE dialogue box

Bad managed preferences that won't go away

On one client machine, a deleted /Library/Managed Preferences/ folder keeps coming back, with incorrect user preferences, although:
- I have unbound, rebound and unbound the machine from the server;
- The machine is currently unbound;
- I have repeatedly deleted the /Library/Managed Preferences/ folder
- I have deleted every mxc or managed plist from the user's preferences folder
- I have deleted the ~/Library/Preferences/com.apple.mcx.manifests/ folder
What am I missing?
SL server and client.

It sounds like you have some managed preferences setup in Workgroup manager. Are you using a network user account?
Remember managed preferences can be defined by user, user group, computer or computer group.
The best way to check your preferences is to look at all those options that apply to the user and / or computer you are having problems with. Open workgroup manager and select the user, group, computer or computer group and then click on "Preferences" up the top. If there are any preferences that have been defined for that record then it should be indicated by an icon that looks like the mouse cursor with a greyish circle in the background. Clear any unwanted preferences and try again.
The ~/Library/Managed Preferences/ folder will regenerate itself when you login. This is why deleting this doesn't do anything.
If this doesn't solve your problem, can you please be more specific about what preferences that you are having problems with. What is or isn't happening that you do or don't want to happen?
Hope that helps.

JEE WebSphere Management Pack: Issue with 8.5.5 Discovery

Is WebSphere Application Server 8.5.5 supported as a discoverable JEE Application Server within System Center Operations Manager 2012 R2? We have tried just about everything at this point....
Currently Running JEE IBM WebSphere 8 Application Server MP version 7.3.2135.0
Agent Running as Proxy
RunAs account created and bound to server
BeanSpy deployed and functioning via query.
Universal Discovery used with no success. (NewJ2EEAppServer.ps1 does not except version 8 of WebSphere).
Any help would be appreciated

Hi Deem13,
Please look at these posts:
http://blogs.technet.com/b/random_happy_dev_thoughts/archive/2012/05/21/manually-discovering-jee-application-servers-with-scom-2012.aspx
http://social.technet.microsoft.com/Forums/systemcenter/en-US/d15bc060-a071-4063-bf5d-c4ec9f0d8cbb/jee-websphere-management-pack-issue-with-discovery?forum=operationsmanagermgmtpacks
http://blogs.inframon.com/post/2012/04/27/WebSphere-monitoring-with-the-JEE-Application-Performance-Monitoring-management-packs.aspx
Natalya

Site Manager Update Issue Continues

Duncan;
It appears that the iTunes U Desktop Application update issue has not been resolved. I added new content to a collection (see attached link) on Friday. As of this morning, the tracks have not appeared in the iTunes U Desktop application (ver. 10.0.1), although they do appear in the Quick View Preview, but cannot be previewed in that window.
The tracks have been available for preview and download all weekend on the iPad and iPhone.
Syd Rodocker
Tennessee Department of Education
http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewiTunesUCollection?id=39129 4396

Greetings All;
Just checking to see what, if anything has happened with the Public Site Manager Update issue on your campus or in your office.
I've uploaded content that still hasn't shown up in the iTunes Desktop Application in over two weeks.
Oddly enough, I have added URL's to our site, and that information shows up within an hour of Publishing the site.
Just wondering if anyone has experienced a resolution of the issue.
Syd Rodocker
Tennessee Department of Education

Credit management related issue - please respond ASAP

Hi,
I have a credit management related issue,
The requirement is as below:-
If receivables value is zero for a customer and after a sales order is saved and delivery is created, a check should happen to see if the GROSS (Total including VAT) , not Net, value exceeds the credit limit for that customer and the delivery doc should be blocked and then del doc will be released by the credit reps using VKM5.
My client wants the orders to accepted always and delivery notes created but the delivery notes should be blocked from further processing. They are then released by the credit reps using VKM5.
If receivables value is more than zero,then system response is OK.
I understand that Customer's credit limit is the amount entered whichrepresents an upper limit for the total receivables and the foreseeable receivables from the customer.
If the Receivables value is zero, system will not check the credit limt value at all.
Thanks,
Rohit
Edited by: rohit rathi on Apr 8, 2010 11:16 AM-updated
Edited by: rohit rathi on Apr 8, 2010 11:18 AM

Hi Rohit,
1.If you don't want to perform check on sales order stage, then you could leave the credit check as blank for the sales order type.
2.Please leave the field "credit active" as X for the sales order item category. Then even the check itself is not performed, the credit value is updated when saving the order.
3.The credit price is copied from sales order to delivery document. If you would like to configure which value(Total including VAT) should be taken as the credit price, the configuration is done in V/08. Define the line as subtotal=A. Then the amount is taken as credit price.
4.You could create your own routine and assign it to OVA8 no check if you want the credit check not being performed when Receivables value is zero. However from my point of view, it doesn't make so much sense to do that. For example, one big order could expeire the credit limit and make the receivalables with a big amount.
Best regards,
Smile

"Application not supported" but only in Managed Preferences

Using Server 10.9.1 and OSX 10.9.1.
If I open the client computer locally and go to Applications, I can launch the application.
However if I log in as a networked user with managed preferences, the application is greyed out and I get the "You can't open the application because it is not supported on this type of Mac".
there are no other copies of the aplication on the server. I have

Posting got cut off.. sorry.
There is only one copy of the application on both the Server and the Client.
Any ideas?
Thanks
Mitch

Mobile account managed preferences sync rules not applied

Hello everyone!
I am testing out mobile accounts and home sync on a few of the machines I have. My goal is too use mobile accounts as a way to backup small documents. I have many preference and Home sync rules applied to a group. All the machines I have added to this group seem to recognize these rules, but one machine does not. It is syncing folders and file types that I have excluded. I have checked the users managed preferences file and it appears to be correct, yet when I start a sync it does not appear to follow it's own managed preferences.
One thing I should add is that these machines have been using plain old local accounts and I have been migrating them to mobile accounts using this method:
http://www.macenterprise.org/articles/migratingalocalusertoanetworkuser
This method seems to work great except for the fact that the users preferences like the dock don't appear to be carried over.

Did you ever solve this? I have just started testing this in our office as well. It appears I have a machine that does not appear to obey the rules ether. I am also migrating local accounts to mobile accounts.

Publish client print queues as managed preferences?

Hello,
I followed the documentation from Papercut NG on Mac printing, section Publishing the printer via Workgroup Manager to get the defined print queues for my client machines published as managed preferences.
I set up the print queues on the server. On the client, I configured the server print queues using the local Administrator account and printed successfully a few test pages. I then logged in with an Open Directory account with admin privileges. I then open Workgroup Manager, select a Computer Group, click Preferences, select Printing. I enable Manage Always, but the list of Available Printers remains empty, contrary to what the screenshot tells me from the referred article.
Environment:
+ Snow Leopard Server 10.6.1 on a MacMini.
+ Snow Leopard 10.6.1 on a MacPro.
Am I missing something?
Ringo

Hello,
I followed the documentation from Papercut NG on Mac printing, section Publishing the printer via Workgroup Manager to get the defined print queues for my client machines published as managed preferences.
I set up the print queues on the server. On the client, I configured the server print queues using the local Administrator account and printed successfully a few test pages. I then logged in with an Open Directory account with admin privileges. I then open Workgroup Manager, select a Computer Group, click Preferences, select Printing. I enable Manage Always, but the list of Available Printers remains empty, contrary to what the screenshot tells me from the referred article.
Environment:
+ Snow Leopard Server 10.6.1 on a MacMini.
+ Snow Leopard 10.6.1 on a MacPro.
Am I missing something?
Ringo

Managed Preferences issue

Similar Messages

Maybe you are looking for