Open Directory - manage users on lion and windows?

Hi everyone,
Like to check on this.
I asked this before this and I know it can manage Macs. But how about managing windows users, say windows user login into a domain which is configured by Lion Server. Will there be any implications or can't be done at all?
If I have Lion Server to manage Macs and Active Directory to manage Windows, how do i centralize between these 2?
Any tips for me? Thanks.

If I understand your question, then you are looking for a tool like Centrify. This will put all management on one platform.

Similar Messages

Hi...I have a Macbook mid-2009 which has both Mac OS Mountain Lion and Windows 8.1 32-bit?Is there a way to install bootcamp on the windows side?

I have both Mac OS Mountain Lion and Windows 8.1 32-bit installed....The machine is Macbook Mid 2009...Whatever i do i can't install and use bootcamp on the Windows side.........Apple Support says it only supports Windows 64-bit which my machine cannot install.......and when i tried to install Bootcamp 4 it says it only supports Windows 7 .........Is there no way to install and use Bootcamp without buying another computer?

Boot Camp - Apple Support
Boot Camp- System requirements for Microsoft Windows operating systems

After successful install, all my adobe cc docs, when open, change pointer arrow, i-beam and window to oversize. When doc closes all return to normal size. I'm on a PC. Screen res set to medium 1920x1200. Any ideas how to fix?

After successful install, all my adobe cc docs, when open, change pointer arrow, i-beam and window elements to oversize. When doc closes all return to normal size. I'm on a PC. Screen res set to medium 1920x1200. Any ideas how to fix?

Ok thanks Linxup I would recommend posting in the respective forums for each of those software titles as opposed to the Creative Cloud Download & Install forum. The relevant forums are as follows:
InDesign - InDesign
Illustrator - Illustrator

HT4818 Upgrading OS X 10.5.8 Leopard on my iMac w/boot camp 2.0 to Lion and Windows 7?

I have an iMac, 1TB, 3.06 GHz, Intel Core 2 Duo, 4GB memory. I'm running OS X 10.5.8 Leopard w/boot camp 2.0. The PC side has 240 GB (of the total 1TB) running Windows Vista. I want to upgrade to Lion and Windows 7. Can I perform upgrades without messing the current partions up? I know I need to upgrade to Snow Leopard, then Lion. When I do these upgrades, does it affect the boot camp side? Do i upgrade the Boot camp side separate from Mac side? Can i upgrade to Windows 7 Ultimate without upgrading the Mac side? How does the upgrade process work when you have the HD partioned?

Upgrade to Snow Leopard, then update to 10.6.8 Snow Leopard Purchase Mac OS 10.6.8 Combo Updater
Before going to Lion or Mountain Lion, check to make sure your applications are compatible. PowerPC applications aren't supported by either one. Application Compatibility
If you want to upgrade to Mountain Lion:
To check the model number hold down the option/alt key, go to the Apple menu and select System information.
iMac (Mid 2007 or newer) model number 7,1 or higher
MacBook (Late 2008 Aluminum, or Early 2009 or newer) model number 5,1 or higher
MacBook Pro (Mid/Late 2007 or newer) model number 4,1 or higher
MacBook Air (Late 2008 or newer) model number 2,1 or higher
Mac mini (Early 2009 or newer) model number 3,1 or higher
Mac Pro (Early 2008 or newer) model number 3,1 or higher
Xserve (Early 2009) model number 3,1 or higher
Your Mac needs:
OS X v10.6.8 or OS X Lion already installed
2 GB or more of memory
8 GB or more of available space
If you have applications that you want to use that aren't compatible, you can retain Snow Leopard and create a new partition.

Define a remote linux nfs home directory for an open directory's user

Hi,
I want to migrate from nis to open directory. Everything but "auto homes" looks good. As I create a user with the workgroup manager, under the 'Home' tab, I'm unable to specify a remotre nfs home directory(linux).
So, I want client01(linux) to authenticate on macsvr01(mac osX 10.6.2 / opendirectory). When authenticated, I want macsvr01 to tell client01 that it's home directory is hosted nfs on linuxsvr01(linux nfs file server).
When i look the workgroup manager, the only possibility seems to be 'afp'.
When I try to specificy nfs entries, I can't validate my setting because the 'Ok' button remains grayed out.
Any suggestions?
Thank you,
Luc

I assume you are creating folders in a file server and its a windows machine , is it ?
You can install a remote manager on file server or on any other machine in network and execute your scripts remotely using remote manager
Also you can execute your script like wscript c:\CreateFolder.vbs
Thanks
Suren
Edited by: Suren.Singh on Aug 10, 2010 3:20 PM

How To Change Default Expiration Date for Portal User in Linux and Windows?

Hello,
I have a couple of environments I recently installed:
1. Oracle Application Server 10 Release 2 (10.1.2) SEOne on Windows
2. Oracle Application Server 10g Release 2 (10.1.2) Enterprise Edition on Linux
I heard the portal and orcladmin user passwords will expire in about 60 days. I want to prevent this from happening. How can I set the expiration date to never expire for both these users? Or at least give me some warning?
I heard that you can do this through the Oracle Directory Manager. However, I am unsure as which server to enter on the field. I've used the following:
<servername>.hostname.com/389
<DBname>.hostname.com/389
They say 389 is the default port. Since I did not really
Does anyone have any ideas?

You have the answer in yours hands:
Search for "60 days" in the forum
How can I enfore Password Expiry Without Lockout?
for instance.
For the servername, it's the name of your server and the port is depending of your platform (have a look to $ORACLE_HOME_INFRA/install/portlist.ini) and
chech the value for: Oracle Internet Directory port
Patrick.

Trust relation between mac server 2.2.1 (10.8 mountain lion) and windows server 2008 r2

i have the following settings:
windows 2008R2 domain server.
mac server 2.2.1
mac client machines
mac server machine is joined to Active Directory in windows 2008r2 without any problems.
mac client machine is joined to mac server without any problem.
the only problem is that i cannot log in to the mac client machine with a username from the active directory in windows 2008r2. i can log in with a created user on the mac server.
i did a trust relation in windows 2008r2:
Realm trust
Transitive
One-way incoming
still cannot log with ad users. can anyone help me in the configurations if i missed something? i am new to mac servers and their configurations.

does this mean that on every mac client i have to join 2 domains, the windows domain and mac domain?
Yes
then, why to use "workgourp manager" in mac to copy all the active directory users to mac server group? i do this to make all users available for authentication through mac serve ronly.
Am I right? The users on your macserver are a copy of your users of the AD? It was not necessary to do that. Because all Users will listed on the Server.app on the User-Manager if you setup was correct. And this means:
- first join your Mac (used as Server) to your Active Directory
- second Install the Server.app. The Setup Wizard will do the rest.
In my case, on the Usersection an the Server.app I will find "Benutzer von FAMILY-NET" that is my Active Domain.
and if i join the mac client to windows domain for authentication, why do i need the mac server for? i need only to authenticate users in active directory on mac os x and that is only it.
In this case - you need no Mac Server!
Only if you want to use the Services of the Mac-Server (DNS, Wiki, Mail,...) or Manage you IOS/Mac Devices. Than it is necessary.
sorry for my many questions, i am very new to mac os x and server.
No problem. I lived in Mac-Worlds since 2 years. I infected with it with the purchase of my first iphone.

Open Directory groups not showing up in Windows

Hello,
we are using Open Directory on a Leopard 10.2 as a primary PDC for mac, linux and windows clients.
The Kerberos sign in works as expected, but we can not get any group created in the OD to be displayed (or selectable) from windows. All users show up, but no groups.
Anyone got an ides or the same problem?
Message was edited by: majs

Same problem here. On Windows client we see only domain users, no domain groups.
No solution yet.

Open File dialog user can delete and rename files.

Does any one know if there is a way to prevent a user from deleting and renaming files by right clicking on them in an Open File dialog box?

Well, the problem is that this isn't a LV dialog box. It's the standard Windows file dialog box and this is the way they work in Windows.
Mike...
Certified Professional Instructor
Certified LabVIEW Architect
LabVIEW Champion
"... after all, He's not a tame lion..."
Be thinking ahead and mark your dance card for NI Week 2015 now: TS 6139 - Object Oriented First Steps

Open Directory-The user name you entered does not exist

Can someone help please? I am having some issues with my open directory server.None of the Network users can log in.The dns is ok.The ldap mapping to the server works fine.But when i access the shared home directories of the network users through workgroup manager, i notice that each user has lost the permissions to his/her home folder, the owner portion is empty.if i click on user/groups and drag the user to the owner portion to assign read/write priviledge it tells me "unable to make changes,the username you entered does not exist".I mac am running Mac OS Server 10.3.9

Hi Hussein
Thanks for the update.
I have gone through all those notes. But, the issue we face here seems to be a peculiar one. First of all, it happens while applying for job (iRecruitment Self Service) and not while creating a contingent worker or creating an employee in the form, as given in the notes.
Moreover, We haven't had this error either in development nor in test instance. It happened only when we migrated the setups to Production. Moreover, the test and development are nothing but the clone of production at various time intervals. We have tested this on the very latest clone of production (that happened on 15th november) and verified that it doesn't popup there.
Can you give me some insights 'What could be the actual problem'?
Considering the solution given in the notes, it talks about 'Setting the default work location for the business group'? Where to set this up?
Appreciate all your help.
Thanks
Alagappan

Change Open Directory Home Users Directory Command Line

We have over 1,000 users in our first attempt at Open Directory. Right now they have all different home directories but we'd like to set them all to one location, the temp directory, it's for a student lab. What is the best way to programmatically run through every OD users, check their home directory setting, then change it?

As an additional comment:
I used the dscl -passwd CLI for over a year and it was effective. However, sometime around the update to 10.5.8 this command refused to work on my server and resulted in a dsLDAP error code. This happened even if run from a terminal window on the server. The OD master is still running strong without errors.
Thanks to Galen Sprague who posted an alternative, I switched to pwpolicy as in:
$ pwpolicy -a <LDAPadmin> -p <adminPW> -u <username> -setpassword <newpassword>
This seems to work consistently from a Ruby invocation and at the terminal.
The advantage is that an old password is not required only the new password.
The disadvantage is that a user could change his/her own password using dscl -passwd without requiring the adminUser authentication.
HTH,
Harry

I have dual boot labs that I set up up for a school. The Partitions consist of mountain lion and windows 7. I use bootlicker as the software for selecting the operating systems. When I choose windows, it takes just under 2 minutes to go to the login sc

I have a dual boot lab that I set up for a school. The partitions consist of Mountain Lion OSX and Windows 7 Ent. I use bootpicker software for choosing the operating system at startup. When I select the windows partition, it take just under 2 minutes from selection to the windows login screen. It seems to take incredibly long for the mac to "shut down and hand over the operating system to windows.
Do you have any suggestions on how to get this timing faster?
Thanks for any ideas/input

The only suggestion I can make is to look ar ReFind (previuosly ReFit). Startup mamangement is one of its features.
But
It is very powerful so test it for yourself before deploying it. Some of the functions are best kept out of the hands of the curious, or 'playful'
And you never answered this question.
Tell me what the needs are, do the users always need to choose Windows or is this a variable?

Active Directory Open Directory Disable Users

Can you make an Active Directory Account disabled in the Open Directory, but still have it function in Active Directory?
We are trying to disable a generic lab account in Active Directory from being able to comment on our Blog Pages.

Hi
Did you read what you typed before you posted? Because the question does not make sense and contradicts itself.
Users that exist in the AD node do not as such exist in the OD node. In the OD node you are simply looking at them as they are presented to you from AD. Neither can you disable AD accounts from the OD node. You have to do that on the AD itself.
If you have enabled augmented records for AD users then disable them using the reverse process you used to enable them. That way AD users are stopped from commenting Blog Pages but are still active in AD.
Tony

Is the directory manager restricted by password and account policy?

Is the directory manager account affected by the password/account policy set? Like will its password ever expires or if I fail to authenticate for the max tries, will I be locked out too?
Also, for the account policy, there's this fail counter that records the number of failures authenticating by the user, how could I obtain the values of this counter so that I could inform the user how many attempts he has left?

Password and account policy do not apply to the directory manager.
The attribute which stores the bind attempts is passwordRetryCount. This is an operational attribute so you must ask for it in your list of attributes sent with the search request.

OS X Lion and windows networking..

This is just frustrating.
After installing Lion everything is just fine initially but now after a day i start seeing some oddities.
I have MBP with Lion on it connected via wifi to a router that has a windows & ultimate machine hooked up to it. It also has a USB drive hanging off it the router that is.
I can see the shared usb device and can write to it. The Windows machine is nowhere to be found. I used to see it with snowleopard just fine.
On the lion machine firewall is open when it comes to sharing and filesharing is enabled.
On the options page under filesharing there is a username that is not checked. it's my username. when checking it it asks for username and i give my username and it claims it's wrong.
Any suggestions short of replacing my wife's windows7 machine. On the windows machine the firewall is turned off and the sahre on it has everyone having full rights on it.
Any suggestions? Going nuts here pulling what little hair i have out.
-M

There are huge risk with creating a 'shared' partition after installing the OS (both).
I don't think your Mac has the RAM and resources to run both with guest Windows OS.
High speed external drive available? ExpressCard or something?
You can add read and write support to Windows for HFS; and NTFS for OS X.
Paragon NTFS. MacDrive HFS for Windows.

Open Directory - manage users on lion and windows?

Similar Messages

Maybe you are looking for