Unix and workgroup manager in 10.4 & 10.5

hey folks:
since we don't have an OD master, we're running workgroup manager (WGM) locally on about 40 macs to manage access to certain system pref panes. we also prevented opening of WGM on each machine except from the root account.
i'm looking for an elegant way to use the command line to UNDO this work and push that solution via ARD. right now i've tried running these lines of code:
sudo rm /Library/Preferences/DirectoryService/*
sudo rm -dr /Library/Managed\ Preferences
sudo dscl . -delete /Config/mcx_cache
and this works, but only temporarily. while it immediately allows access to ALL system preference panes, if the machine is restarted, WGM re-asserts itself and the managed prefs are, once again, put into play.
i want to avoid going to each machine, logging in as root, launching WGM and unselecting the choice i made some years back to manage the system pref panes.
any thoughts?

Here is how I got mine to work, I figured ill share since it was driving me crazy...
open workgroup manager
Click "cancel" on the login window (with the grayed connect)
from the menu click on "server -> view directories"
workgroup will load in "not authenticated" mode
click on the lock symbol on the far right
enter your diradmin or admin user name and password
This seemed to do the trick for me, hope you have the same luck I did.
Now I want to know why it stopped working in the first place

Similar Messages

  • HT1338 XSERVE 10.6.8 is running very slow, and Workgroup Manager is not responding

    XSERVE 10.6.8 is running very slow, and Workgroup Manager is not responding. There is no more updates to download.

    munish khanna wrote:
    1. upgrade to lion, which should over write previous software and the reasons for it being slow.
    No, you don't want to upgrade over a buggy system, Lion has issues of it's own that will only complicate matters, plus Lion is slower than Snow Leopard.
    Learn all the pitfalls before you upgrade to Lion, like all your Rosetta/older programs will no longer work and more.
    Leave Lion for a new hardware purchase is my advice, it's still got plenty of security and other issues.
    For your performance, your likely better off replacing the hard drive with a 7,200 RPM model and maxing the RAM, download the free MacTracker to find out your specs, and OtherWorld Computing is good for videos, tools and parts.
    http://eshop.macsales.com/installvideos/
    2. Format the hard disc and reinstall snow leopard.
    That will work, provided your data is off the machine first.
    Now how do i reinstall snow leopard as it was an online purchased upgrade from leopard.
    The 10.6 Snow Leopard disk that you upgraded 10.5 Leopard from actually has the full OS X 10.6 on it.
    All you have to do is stick the disk in and hold the c key down while booting, use Disk Utility to erase the entire drive, quit and install 10.6.
    Of course your not going to get the free iLife that came with the 10.5 grey disks, see if you can first install 10.5 with the same methods, then setup with the same user name as before, then upgrade to 10.6
    I think Apple nulled booting off the 10.5 disks, but it won't hurt to try.
    Another method would be to install 10.6 fresh by itself, then use the program called Pacifist to extract iLife from the 10.5 disks.
    http://www.charlessoft.com/
    Read here for plenty of how to's
    https://discussions.apple.com/message/16276201#16276201

  • My LAPD & kerboros service is stopped and workgroup manager is not working either

    Hi I had to restore from a back up a while ago but the workgroup manager seems to have lost all of the passwords and the LAPD & kerboros service wont start in th open directory mater.
    I have been told that if I make the opendirectory master a stanalone and then back to open dirctory master this will fix the problems.
    Any advice for this server dimwit?
    Cheers
    Bricko

    Have you tried demoting and repromoting? It usually does do the trick. Also, yes, all of the passwords were erased, they do not get saved. They will all need to be reset to something generic, given out to all the users and then have them change their passwords to something personal via the web portal.

  • AD accounts and workgroup manager settings

    We have several Windows AD accounts that can logon, but are not applying the correct settings that have been created in workgroup manager. Open Directory and Active Directory bindings appear to be fine.
    Can anyone help!!

    The folks who hang out in the OS X Server forums are helpful for these kinds of things:
    http://discussions.apple.com/forum.jspa?forumID=1232

  • Synch problem - Server.app and Workgroup-Manager

    Hello everybody,
    I have been having troubles with this OS X Server from the very beginning - I even went through the hassle of a complete new installation - Server.app failed from the very begining.
    I found something new today. Take the Network-Accounts or Groups (it is an Open Directory Master)  and view them in Server.App and in Workgroup-Manager to compare entries. Every group in Workgroup-Manager is visible in Server.App as well - BUT - the members of a group (visible in WM) aren't showing up in the respective group if viewed at through Server.App?! What is going on here?

    Hello everybody,
    I have been having troubles with this OS X Server from the very beginning - I even went through the hassle of a complete new installation - Server.app failed from the very begining.
    I found something new today. Take the Network-Accounts or Groups (it is an Open Directory Master)  and view them in Server.App and in Workgroup-Manager to compare entries. Every group in Workgroup-Manager is visible in Server.App as well - BUT - the members of a group (visible in WM) aren't showing up in the respective group if viewed at through Server.App?! What is going on here?

  • Server Admin and Workgroup Manager is sloooow

    When running Server Admin or Workgroup Manager directly from my client macbook, connected to one of our leopard servers, it is painfully slow. I mean painfully.
    It takes a minute to connect while I stare at this spinning wheel, some actions never stop spinning the wheel. Sometimes it just stops and everything is working great.
    If I run the admin tools locally, connected through remote desktop its working much better, but can still be quite slow when connecting sometimes.
    Any ideas?

    I had a similar problem with a new xserve, setup with the factory pre-install leopard 10.5.2 it defaults to the server FQDN (myservername.com) for server admin with no DNS setup it takes ages to finaly get SA to open because it can't resolve itself.
    deleting server.myservername.com once SA fianaly responds it reverts to server.local and responds
    once DNS is configured correctly, no more issues.
    this particular server went on to develope regular OD crashes and AFP problems with OD crashing and when users logged in/out nd AFP having to be restarted when OD crashed and I decided to rebuild it.
    the DVD was 10.5.1, on bootup it was far worse than the factory pre-install when opening SA
    I upgraded to 10.5.2 combo before turning on any services , even when I got DNS working it was slow to respond nothing like as bad as without DNS but still slow. DNS checked out fine. The only way I could get it to respond normally was to add the domain name to Search domains in network preferences.
    something I did notice with the DVD install in server setup the local address defaulted to .private SA expects .local and the server name wasn't automatically filled out when I entered the server FQDN. the factory pre-install automaticly filled out the server name and used .local
    there is an edit button near the server name once you click on that it changes the name from .private to .local
    I didn't notice the .private the 1st time around and with the .private things where far worse. SA wouldn't respond at all even with 127.0.0.1

  • Imovie 8 and Workgroup manager

    Hello
    I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

    Hello
    I am using workgroup manager and imovie 8. When I login as a student or staff user, I cannot import files such as AVI. I get an error message (This file cannot be copied or moved error code: -43). If I login as admin, I am able to import files. I even tried to create a local user, but I still have to give admin rights to get it to work. I noticed in imovie 8 that when I am importing an AVI file from my flip camera, there is a save to pull down option that lists the Mac OS X hard drive. It does not give an option to save it to another location. Could that be the problem? When a student or staff is logged in, they cannot save to the local HD. I tried a previous version of imovie and was successful at importing a file. However, I want to use imovie 8. Any suggestions?? Thank you

  • Problem with home directories NOT in Users and Workgroup manager

    I am setting up a Leopard server (10.5.3) with the users directories in /h1. This is mounted as /Volumes/h1.
    It is exported under AFP as /h1.
    When I try to get Workgroup manager to create a home directory, I can enter the home directory as:
    afp://quattro.innocon.com/h1
    path is 'user'
    Full path is:
    /Network/Servers/quattro.innocon.com/Volumes/h1
    However, when I try to log in as this this user, it says that the directory /Network/Servers/quattro.innocon.com/h1/username does not exist.
    I cannot seem to figure out why the 'Volumes' part of the full path is being lost.
    Any ideas on how to get this right?

    have you checked to see if /Network/Servers/quattro.innocon.com exists?
    I'm having ALOT of issues with automount not picking up on the mount-maps set by Open Directory.. If anyone has any solutions on this it would be great.

  • Difference between Profile Manager in Server v2.2 and Workgroup Manager - Mobility

    Hello everyone,
    I was wondering if anybody experienced mobility management with Profile Manager in Server v2.2 ? It is known that mobility management in Profile Manager is broken in previous versions of Server:
    https://discussions.apple.com/thread/3637378?start=0&tstart=0
    Does anybody know if mobility management has been fixed ?
    Thanks for your help. Best regards.

    I'd also like to know an answer to this. I'm managing a small network and don't have a test environment to stage things in. (This is needed as Profile Manager is WAY too unstable to production.)
    I'm currently using WGM to look after Mobility settings and Profile Manager for everything else. I used this setup after I got the same reply as per thread 3637378. It would be nice to have the settings all in once place!

  • WebMin, Server Admin and Workgroup Manager

    I saw a fairly recent post where it was stated that "Using webmin/virtualmin will break SA and WGM sooner or later." I assume that means that SA and WGM will no longer be reliable, or usable at all, but that the services provided by Tiger Server will not be affected. Can anyone tell me if this is correct? Or give details on just how SA and WGM break? And is anyone successfully using WebMin exclusively for working with OS X services -- mail and Web in particular? Thanks to whomever...

    I am using Webmin to help configure things that are in-there, but have no GUI in SA or WGM. Apache and DNS are good examples where SA lacks a big bunch in configurability.
    The usual precautions work fine in this situation. Always have a current backup, and have another even more current one ready before doing major experiments with configuration.
    Always log off with any other utlity before starting to alter settings with another utility. That will save you from tools cross-writing to config files, potentially getting you into trouble.
    The /usr/bin/sudo admin lecture bringt it down to the point: Think before you type.
    Regards MacLemon

  • Relationship btwn Virtual Host Services for Groups AND WorkGroup manager??

    Can someone please explain the relationship between Virtual Host Services (as specified in the Sites section of Server Admin) AND "Enable the following services for this group on ... and the options"?
    And where does one go to "create wikis on this site" when one is give the authority to do it in Server Admin > Sites > Services for Groups (Allow the following to create wikis on this site)?*
    Finally, why do all my groups seem to show up on all my virtual hosts, even though they are only enabled on a particular site?
    Thanks in advance for any assistance. Hopefully any answers will help others with their efforts to understand this set-up.
    Cheers,
    Ashley.
    * I'm assuming they mean actually create new wikis rather than just add pages to the current one.

    Thanks Angus, I see that error too.
    I understand that Virtual Sites are web-related Apache settings. So, I guess the "Services for Groups" functionality there-in (Sites > Web Services) is just to indicate that this virtual site can have wikis, calendars, blogs etc.
    I also understand what a Group is but I am confused as to how they relate to wikis (especially when the config item (Sites > Web Services again) says "allow the following to create wikis (plural) on this site" - my emphasis).
    Is it saying that from all the users/groups only the following users/groups can turn on a wiki which will run on this virtual site? For me it sounded like a user/grous could create multiple wikis. So I would like to know if wikis are one-to-one with users/groups?
    Cheers,
    Ashley.

  • Does workgroup manager and OSX have problems?

    I am a classroom teacher using Adobe CS2 on 24 IMac G5's and 3 IMac G5's with the intel processor. I have had problems with Photoshop and Illustrator saving empty files and files disappearing. So my Tech people want to redo the server.
    They tell me that I can have only one group of users, because more groups causes many problems. At the present time I have four groups set up according to the different classes I teach. The groups are Desktop Publishing, Digital Photography, IWP Students and Night school. Each group has different programs and template files that they need for assignments.
    I have been told this using of two or more groups is what's causing saving problems with Adobe CS2 programs.
    They want to make one group for all students and I don't see why if workgroup manager sets preferences for each group (about 75 students in each group) that 2 or 4 groups is all that many. Right now each student is assigned to a group and only sees programs or files that are used in that group.
    If this new an improved setup is done then all students see everything and have access to all programs for all classes instead of just the group assigned to the class they are in.
    Am I missing something or isn't the server and workgroup manager supposed to be able to set up different groups so you can limit access.
    I want to limit access but the tech people want something easy and less limited. Are they right that the saving problems of Adobe CS2 programs is due to too many groups(4 total) with different preferences? Does Workgroup manager have problems with this type of setup? Are the Tech people just taking the easy way out to save on the new setup? Is my theory of limiting access wrong?
    I am from the days of At Ease with panels. I never had problems no file sharing no extra files or programs to use.
    Any opinions on the server setup with Workgroup Manager?
    Dennis

    Sorry I placed this in the wrong OS area and I don't know how to move it to the correct OS area. Can anyone help with that?
    Dennis

  • How to edit plists for a group in workgroup manager

    hi I am an It technician in a School which has been windows based
    Over the summer the school upgraded to a 95% mac network we still have a small windows network as one database would not work on Mac osx server
    authenication and user accounts are also provided from the windows server's and also we are using a citrix soution to access windows apps from the macs
    140 imacs have been rolled out and we have 2 mac servers with deployment studio apple remote desktop and workgroup manager which was set up with groups and access rights for staff and pupils.(i was not involved in initial setup)
    Anyway I am starting to get my head round the mac side of the network but we are having issues where pupils are saving data to the local profiles when they log onto the macs and not the network shares that are allocated to their profile when they log on which means that when they log onto another mac their data is not there i have been asked if its possible to remove all local save area's from the finder and favorites pane's and only leave the pupils allocated network share, desktop and downloads as save locations is there a way the finder and favorites can be edited?
    I am assuming that i edit a plist possibly and then replaced the edited one into workgroup manager
    any help to point me in the right direction would be much appreciated
    regards
    Lee

    Right have found the apple.com finder plist which of the options would i set to false to only allow the the shares as mentioned above to be visible and remove the other save locations
    regards
    lee

  • Profile manager or workgroup manager

    Hi,
    I've been using OS X server for a while but stayed on 10.5. Today I have to upgrade and I'm a little confused between profile manager and workgroup manager.
    From my understanding they do both the same. Does Apple have the intention to stop WGM?
    Are there any recommendations on one or the other? We're in a school with about 300 students. My feeling is that WGM has more setting but may be Profile Manager is more reliable?
    Thanks for your help, Guy

    Profile Manager is definitely NOT more reliable, especially as the number of devices gets over 1,000 (speaking from experience and many Apple Cases later).
    Profile Manager is "the" replacement for Workgroup Manager, but at this point is still not "a" replacement for Workgroup Manager. Workgroup Manager can do more as far as setting preferences.
    For example, I can set all Google Chrome preferences for all computers in our district with Workgroup Manager. Can't be done with Profile Manager.
    I can set Printing Preferences for all our computers in the district (which printers get added, if they should duplex, if secured printing is desired, etc) using Workgroup Manager. Cannot do that with Profile Manager.
    Of course there are some things Profile Manager can do that Workgroup Manager cannot, but there are other utilities (Munki, DeployStudio), that can take care of that. Profile Manager is currently NOT a replacement for Workgroup Manager.

  • I am using 10.6.8 and I cannot get an Imac to appear in workgroup manager, the mac is bound to both AD and OD. I have removed the bindings, rebuilt the mac and also removed it from bot system but still it does not appear in OD in work group manager.

    I have a mac which is connected to a network and is bound to both OD and AD with no issues on my server when I try to manage it through Workgroup manager it does not appear.
    I have unbound it , removed it from both systems completely and even rebuilt it but it still does not appear in WGM.

    If your server is 10.6 and your client is 10.7 you'll have to add it manually to WGM
    via mac address.  10.7 clients don"t automatically appear in 10.6 server wgm

Maybe you are looking for

  • Lightroom to Premiere Pro

    In Bridge and Elements Organizer 4.0 I can simply select a photo and drag and drop the image into Premiere Pro 2.0. It is a very handy feature when having to work with a lot of photos in videos. In Lightroom this functionality seems to be lost. Is th

  • Scrollable frame

    I have 6 test boxes all the same size lined up side-by-side. They are grouped and pasted into a box that is exactly the same height, but not as wide. I selected "pan only" in the overlay creator. When I view it on the iPad, it scolls left-to-right ju

  • Jscrollpane without scrollbar

    adf bc swing appilcation, jdeveloper 10.1.3 this is my form structure this (gridbag layout) jscrollpane(default layout) jpane (null layout) jpane2 jtabbedpane jscrollpane size < jpane size why the scroll bar of the jscrollpane doesn't appear ??

  • How can I find my serial number for Acrobat Professional?

    How to get the serial key of this adobe professional??????????? Help me out for this Thank you,

  • Mavericks freezing / Applications not responding

    Before I start this problem is not isolated to one machine. We have around several MacBook Pros from 2012 onwards,  Retina MacBook Pros and iMacs. The Retina laptops came with Mavericks installed. So our general issues are: - Fan noise loud - Machine