Nested AD User Groups in Workgroup Manager not working in Mavericks

The setup is the traditional Golden Triangle, so Active Directory for users and groups, Open Directory for Managed Preferences. Both Apple clients and server are running 10.9.0
While I can successfully manage the Mac's via OD computer groups, the OD user groups with nested AD groups no longer appear to work. If I nest an AD user it works fine, but not the AD users group.
This is a new AD and new OD, no migrations. This is a setup I've done countless times over the years, but since Mavericks has been introduced, I can no longer make this work.
Any help would be greatly appreaciated.
Thanks,
Alex Price

Hello
I have been having the same problem, when adding an AD Group to an OD group the users in the AD group are not managed, but if i add the user to the OD group it works fine, (with about 5000 active users this is not an option) this has been a problem with 10.9 and has not been fixed with 10.9.1, i assume we need a update to Workgroup manager?
Maverick server is useless at the moment, cant upgrade the clients to Maverick if i cant manage them, are Apple just tring to make my job more difficult than it needs to be, i was happy that they provided Workgroup Manager for Mavericks because Profile Manager is simple not an option, but it would be good if it worked properly, its not a small problem so you would think apple would make it a priority.

Similar Messages

  • CS4 Adobe Extension Manager not working after Mavericks

    Hello,
    I upgraded to Mavericks and now my watermark is no longer appearing in the Extension drop down menu.  I tried to reload it but when I open Adobe Extension Manager in CS4 and try to upload it I get the following message "You do not have the appropriate permissions required to perform this operation. Contact you system administrator to obtain permission.".  I have checked my settings and I am logged in as an adminstrator. 
    Can anyone please suggest how I fix this.
    Thanks
    Anna

    I did find this link, but it is for CS5. I tried it replacing the CS5 with CS4 and it did not seem to work.
    http://www.creativeworx.com/faq/installation-error-on-mac-cs5-you-do-not-have-the-appropri ate-permissions-to-perform-this-operation/

  • AD security groups listed in user groups in Config Manager however not listed when selecting values for the "System Resource - System Group Name" query

    Morning All,
    We are in the process of setting up our SCCM 2012 infrastructure and are experiencing issues with our device collection querys based on AD security groups.
    I can see the security groups are being updated per adsgdis.log - i can see the computers that are members of the groups in AD are being recorded in the same log. Issue is when we build the device collection query - click the value button for the string,
    only 2 of the 18 AD security groups are displayed.  These are 2 AD groups we setup initially to test.
    We have since added several additional yet they only appear to populate as user groups in config manager.
    The same goes for additional OUs that we have created with AD.
    When i click the value button only the initial 10 OUs that were created are populating in the list of applicable OUs.
    We have the discovery methods Group Discovery & System Discovery enabled and set to search the parent OU recursively
    I'm wondering if there might be an SQL issue with this as it initially worked but stopped...
    Additionally we added an OU recently that now appears in in the Values options in the query but the ones added previously and additionally after are not showing up....
    Any help is appreciated.
    Thanks,
    Jeff

    Given the adsgdis.log lists the new pc and the group it's assigned to it appears the AD group discovery is working.
    Have the following excert from the adsgdis.log
    INFO: Processing discovered group object with ADsPath = 'LDAP://************.****.COM/CN=Software - Microsoft Project Professional 2010 x64,OU=Software,OU=US-West,DC=*****,DC=com' SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012 7:08:13 AM 8180
    (0x1FF4)
    INFO: DDR was written for group '*****\Software - Microsoft Project Professional 2010 x64' - E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\userddrsonly\asg8ud94.DDR at 10/4/2012 7:8:12. SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012
    7:08:13 AM 8180 (0x1FF4)
    INFO: DDR was written for system 'THURMANWIN7VM' - E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\adhh8419.DDR at 10/4/2012 7:8:12. SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012 7:08:13 AM 8180 (0x1FF4)
    Here you can see it processes the new members in the Software - Microsoft Project Professional 2010 x64 group and captures Thurmanwin7vm as a member.
    I did find some log entries that reference permission issues with objects in the SQL database and have opened a case with MS to get that looked into.  Hopefully that will be where the issue lies.

  • Can't log in as a user created in Workgroup Manager

    I am a little confused about users created in Workgroup Manager.
    I have created an account with all the proper permissions to log in etc. Their home directory is listed as afp://home/Users (home is the name of the server). The directory for the user I am trying to log in as doesn't exist yet.
    When I try to log into the server "home" with this newly created user, I get the vibrating window that indicates the log in failed.
    I am used to windows and AD where I would create a user in AD and then use something like \\domain\user to log in to the machine as that user. If i wanted to create a local user on that machine, I could do that too and then log in as \\machine\user to get the local user.
    Are Workgroup Manager created users like AD users? Can I use them to log into any machine on the network hooked up to the SL server machine? In this case I want to log into the SL Server machine with this user.
    Thanks for any insight
    Greg

    There is only one root user, so saying "a root user" doesn't make sense. What you mean is an admin user, and it looks like your account has somehow manage to lose its admin privileges.
    Follow the instructions in I lost my admin user and you should get them back.
    Note that in this User Tip, 'youruser' is a placeholder. You are supposed to substitute the short name of your account wherever it appears.

  • Accidently deleted group in Workgroup Manager

    Help!
    I have accidently deleted a group from Workgroup Manager where I work, and need to put it right before they find out!
    Am I able to restore this by using Time Machine?
    Help please?!
    Thanks in advance for any help given. x

    I realized I was able to aceess, and begin setting everything back through the diradmin and password.  I hope this is of help to someone else.

  • Password Manager not working with any internet browsers

    I have Thinkvantage password manager installed (v. 3.20.0311.00) on my Thinkpad X201. I am running Windows 7 professional, 64 bit. Password Manager works for all programs except IE8 or Mozilla Firefox (eg. works for Outlook, works for iTunes, etc.). When browsing, the program simply never pops up. It worked previously, and I still have many saved website login details, but it never logs in for me any more and new sites do not activate the program.
    I have made sure that the add-on is enabled and I have checked the box next to "enable 3rd party browser extensions" in the advanced tab of internet options. I have also tried resetting internet explorer settings. As mentioned above, this in not only a problem with IE8; it also occurs with Firefox.
    Any help would be very much appreciated.
    Dr_Rap

    Same problem here. I just recieved mine (Win 7 pro 64 bit, X201 Multitouch) last week and password manager not working at all in ANY web browser. It recorded my .net password just fine, but i can't get it to work in IE8. Who pays this kind of money for something that doesnt work?
    Fix this Lenovo!

  • Password manager not work on new Chrome

    Hi!
    Chrome version 29.0.1547.57m. Password Manager not working...

    We notice password manager is broken by new chrome. 
    Dev is working on fix, please wait for new release of Password Manager to fix this issue.

  • Kaspersky password manager not working on fox 5

    kaspersky password manager not working on the new firefox 5

    Kasperski has finally released a patch that works fine with Firefox 4, 5 and 6, as well as with Google Chrome!!!!
    You can download the patch at the URL [http://support.kaspersky.com/faq/?qid=208284589 Firefox patch for Kaspersky Password Manager]
    You must follow the entire procedure as described by the Kasperski techs... I just tried it, as I had the same problem as you, and it works fine!!!!

  • After the updating firefox 5.0 the internet download manager not working (not compatible) can you explan why?

    After the updating fire fox 5.0 the internet download manager not working (not compatible) can you explain why?

    Add-on developers need to keep up with new versions of Firefox as they are released and update their product. Have you checked with IDM to see if they have an update for you to install? Or ask them when they are going to have an update ready for 5.0.
    Another thing you could do is to install FlashGot. <br />
    https://addons.mozilla.org/en-US/firefox/addon/flashgot/ <br />
    http://flashgot.net/ <br />
    The developer of Flashgot, Giorgio Maone, keeps his extensions compatible with versions of Firefox that are still in development - future release versions.

  • W7 64 BIT Password Manager not working

    Using CSS 8.3. Can use fingerprint to log into W7. But the Password Manager feature will no longer work.
    Known issue?
    I'm also dual booting with Vista 32 bit. In Vista it works fine. Could the problem be one BIOS chip since its hardware connected (I think) but 2 OS'?

    Same problem here. I just recieved mine (Win 7 pro 64 bit, X201 Multitouch) last week and password manager not working at all in ANY web browser. It recorded my .net password just fine, but i can't get it to work in IE8. Who pays this kind of money for something that doesnt work?
    Fix this Lenovo!

  • Hp file manager not working

    after updating hp slate 7voice tab from jellybean to kitkat the hp file manager not working.

    Hello, and Welcome to the HP Support Community!
    This is not HP's fault - this change was caused by Google.
    Perhaps this article can help explain how Google changed Android KitKat 4.4:
    KitKat and SD cards — what's fixed, what's broken and what's misunderstood.
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • Internet Download manager not working.

    Internet Download manager not working with latest version of Firefox.
    My Firefox keeps crashing regularly as wee. Any suggestions how to fix these two problems.

    Can you confirm the version of Firefox you're using? The information in this post suggests you're using Firefox 19. The latest version is 35.0.1.

  • IDVD is not working in Mavericks... what now?

    I am very upset that iDVD is not working in Mavericks! I need the ability to burn DVDs for family who is unable to access the internet. Any patches or fixes available to make this software usable again? I am very disappointed that Apple would do this without warning users that previously purchased software would be incompatible with the new OS.

    I am also having problems with iDVD under Mavericks. I have used iDVD for many years creating DVD's for family members and archiving our vacations. It worked great under Snow Leopard, Lion, and Mountain Lion, but now Mavericks is a different situation.
    I have two basic problems, (1) after importing the video I want to use, I play it back to preview and a small band shows up at the top of the screen that is not in sync with the rest of the screen. And (2) when showing a slideshow using standard jpegs there are color issues on playback. Help,  I need my iDVD back!

  • App store, Safari, software updates, icloud, do not work in Mavericks 10.9 using a proxy server

    App store, Safari, software updates, icloud, do not work in Mavericks 10.9. these problems are interrelated I am sure. Apple apps were working fine in 10.8.5 I could do software updates through a proxy server using password authentication. I reinstalled a new system 10.9 on another partition and it won't let me use Safari or update software using a proxy server. Firefox works fine (I am using it to post). I am very disappointed that this wasn not fully tested BEFORE releasing Mavericks. Any solutions would be greatly appreciated.

    I had this problem myself.
    Checked the system log with Console, and I found the entry:-
    Nov 11 11:16:41 teds-new-mac.ad.mycompany.co.uk ocspd[537]: Authentication challenge received for "10.203.39.212:8080", unable to obtain proxy server credential from System keychain.
    For some unknown reason, Mavericks seems to be looking in the System keychain, when these credentials are actually held in the Login keychain.
    So, I tried "Copy & Paste"  - copying the https user name & password from the Login keychain and pasting into the System keychain, which worked but it's not quite as straightforward as I initially thought.
    Pasting into the System Keychain was, I found a not-very-intuitive process:
    Having opened your Login Keychain, click once on the item to be copied and when it's highlighted, select "Copy" from the Edit menu or, of course, cmd+c.
    Select the System Keychain:- DO NOT CLICK THE PADLOCK IN THE TOP LEFT TO UNLOCK IT.
    From the Edit menu, select "Paste" or cmd+v.
    You will then get a dialogue box,, enter your administrator's password and select "Modify Keychain" or just hit return, as it's the default entry.
    I found a restart was in order before it recognised everything and would accept https pages without alert boxes, but YMMV.
    Funnily enough - and this is where it seems counter-intuitive, if you do click on the padlock and unlock the System Keychain, "Paste" is greyed out in the Edit menu and cmd+v has no effect.
    Exactly the opposite to what I'd expect..

  • Why is Time machine backup not working after Mavericks upgrade?

    Why is Time machine backup not working after Mavericks upgrade?

    I had the same problem due to the Fire Wire port.  Apple tested it told me it is OK!, I tried a new cable, and have tested both ports on my back up device.  I find it strange that as soon as I installed Mavericks.  The drive does work using USB.  It could be a coincidence, I don't absolutely know at this point, my back up drive ports could stop working, but I doubt it!

Maybe you are looking for

  • UK PayRoll Procedure

    Hi Experts can u tell me the UK Payroll procedure.I know only US payroll procedure i think same as applicable to UK...Can u clarify my doubt.. Regards. Anusha

  • Had FF, had trouble, removed it, now it won't load at all. I download it and after 5 minutes I "click here" and it send me back to the first page.

    Had FireFox and, as has happened before, I started having crashes and other issues. As before, I removed it but this time when I went to install it, nothing happens. I click to DL it and after 5 minutes, nothing happens and i click the button that sa

  • Gmail won't open in Safari

    I have a bookmark of Gmail in my bookmarks bar and for the past 2 days, when I click on it to check my email I get a message saying: "Bad request Error 400" I don't know why it won't open Gmail, I tried it in Firefox and it works What should I do? Th

  • Photos our of order on iOS 8

    hi all. Photos are out of order when synced with iTunes on various iOS devices. Any ideas if this can be fixed and how please?  All my photos are filed in a dedicated folder and they all start with the date in "year_month_day" format.  Example, "2013

  • Div not centering

    http://www.jdcdemo.com/pbc/greater-pine-bluff-chamber-member-benefits-new.html I put the div "new-content" in the editable region of this page and assigned a width width and set the margins at "0" which as I understand it will center the div. Looks l