Braden Manning
Level 1 (25 points)

Q: home folder location in magic triangle setup without altering AD user

Howdy,

I have a situtation in which a user logs into a mac which is bound both to AD and OD in a magic triangle setup. Can their home folder be located on the lion server, without editing the user profile info in AD Users and Groups.

I'm wondering if I can set a managed preference either from a .plist file or something else in Workgroup manager for the home folders to be created on the Lion Server.

 

The problem is the students can login to a mac or windows pc, and we don't want them having network profiles when logging into Windows. Those are just temporary local profiles at the moment and get deleted at logout.

 

Hopefuly that makes sense.

 

Thanks,

Braden

Posted on Jul 4, 2012 8:14 PM

Close
Braden Manning

Q: home folder location in magic triangle setup without altering AD user

  • All replies
  • Helpful answers

  • by Orlando Salazar,

    Orlando Salazar Orlando Salazar Oct 30, 2013 7:18 AM in response to Braden Manning
    Level 1 (0 points)
    Oct 30, 2013 7:18 AM in response to Braden Manning

    Hello Braden,

     

    I'm just wondering if you ever got this working? we are trying to do the samething and would really appreciate it if you can share your info if you got this working.

     

    Thank you in advance.

  • by Braden Manning,

    Braden Manning Braden Manning Oct 30, 2013 3:25 PM in response to Orlando Salazar
    Level 1 (25 points)
    Oct 30, 2013 3:25 PM in response to Orlando Salazar

    Hi,

    What I ended up doing, was turning on Mobile accounts for the students in Workgroup manager. I ended up not having to touch any AD settings for the users at all.  This meant the macs were storing the profiles for the

    students when they were logging in. I then found in Workgroup manager I could also force the profile to be stored on the server by editing a plist file.

    Look below....

    mac1.PNG

    mac2.PNG

     

    So when a student logs in for the first time, the profile gets created on the server, and also locally. It will sync back and forth between the workstation and server automatically. The students can move around, but if they have heaps of work in their profile, it will be slow to login initially, as it does a sync that first time they login to a new machine.

    Other than that, their mac login is not interferring with their login to Windows machines, so all is working well. They are being kept seperate.

     

    Hopefully that makes sense.

     

    cheers,

    b

  • by Orlando Salazar,

    Orlando Salazar Orlando Salazar Nov 6, 2013 1:29 PM in response to Braden Manning
    Level 1 (0 points)
    Nov 6, 2013 1:29 PM in response to Braden Manning

    That worked great!!!! Thnx for the reply.

     

    I have another question for you, now that you have the network folders created, how do you prevent users from going to other users network forlders and modifying them?

     

    Thank you again!

  • by John Lockwood,

    John Lockwood John Lockwood Nov 7, 2013 1:34 AM in response to Orlando Salazar
    Level 6 (9,265 points)
    Servers Enterprise
    Nov 7, 2013 1:34 AM in response to Orlando Salazar

    Orlando Salazar wrote:

     

    That worked great!!!! Thnx for the reply.

     

    I have another question for you, now that you have the network folders created, how do you prevent users from going to other users network forlders and modifying them?

     

    Thank you again!

     

    The users network folders are 'owned' by the respective users and the standard permissions do not allow other users - even an administrator to access them. (The root/superuser account can of course access anything.)