What I ended up doing, was turning on Mobile accounts for the students in Workgroup manager. I ended up not having to touch any AD settings for the users at all. This meant the macs were storing the profiles for the
students when they were logging in. I then found in Workgroup manager I could also force the profile to be stored on the server by editing a plist file.
So when a student logs in for the first time, the profile gets created on the server, and also locally. It will sync back and forth between the workstation and server automatically. The students can move around, but if they have heaps of work in their profile, it will be slow to login initially, as it does a sync that first time they login to a new machine.
Other than that, their mac login is not interferring with their login to Windows machines, so all is working well. They are being kept seperate.
Hopefully that makes sense.
Orlando Salazar wrote:
That worked great!!!! Thnx for the reply.
I have another question for you, now that you have the network folders created, how do you prevent users from going to other users network forlders and modifying them?
Thank you again!
The users network folders are 'owned' by the respective users and the standard permissions do not allow other users - even an administrator to access them. (The root/superuser account can of course access anything.)