Hey all,We have a Mac OSX 10.6.8 Server system joined to our Microsoft Active Directory Domain (2008 domain level, 2008 R2 servers) in a Golden Triangle configuration (Windows AD handles auth, logon scripts served from OSX Server).We're able to bind Macs running 10.11 to our AD/OD and have users log in. Mobile accounts are created for these users as they log on, with an appropriate folder being created under /Users. Our problem is as follows, and only applies to systems running 10.11.After successfully authenticating, users don't see their Dock right away and can't use Spotlight.After waiting 3 minutes, Spotlight responds slowly, resulting in keypresses being registered every 10-30 seconds. Attempts at opening programs within Spotlight results in a message reading "you can't open application INSERTPROGRAMNAMEHERE because it may be damaged or incomplete"After waiting 4 minutes, their Dock appears with placeholder icons (like TextEdit document, but with a ruler, pencil and paintbrush) except for Finder. Attempts to run programs from the dock result in a message reading, "you can't open application INSERTPROGRAMNAMEHERE because it may be damaged or incomplete" except for Finder. Finder opens, but shows nothing under /Applications except an empty Utilities folder.Waiting another 10 minutes results in programs showing up under /Applications, but it sometimes takes an additional 5 minutes before their icons show properly and then all programs open properly without the aforementioned error message.The dock icons stay as generic icons except for Finder and iCal, unless you wait a bit longer, and then the original icons are restored by opening each program on the Dock once... except for LaunchPad. Recreating the dock configuration restores the proper looking icons, except for three programs (Pages, Numbers, Keynote) which show a question mark.

OSX 10.11 Clients, Golden Triangle Authentication

Hey all,

We have a Mac OSX 10.6.8 Server system joined to our Microsoft Active Directory Domain (2008 domain level, 2008 R2 servers) in a Golden Triangle configuration (Windows AD handles auth, logon scripts served from OSX Server).

We're able to bind Macs running 10.11 to our AD/OD and have users log in. Mobile accounts are created for these users as they log on, with an appropriate folder being created under /Users. Our problem is as follows, and only applies to systems running 10.11.

After successfully authenticating, users don't see their Dock right away and can't use Spotlight.
After waiting 3 minutes, Spotlight responds slowly, resulting in keypresses being registered every 10-30 seconds. Attempts at opening programs within Spotlight results in a message reading "you can't open application INSERTPROGRAMNAMEHERE because it may be damaged or incomplete"
After waiting 4 minutes, their Dock appears with placeholder icons (like TextEdit document, but with a ruler, pencil and paintbrush) except for Finder. Attempts to run programs from the dock result in a message reading, "you can't open application INSERTPROGRAMNAMEHERE because it may be damaged or incomplete" except for Finder. Finder opens, but shows nothing under /Applications except an empty Utilities folder.
Waiting another 10 minutes results in programs showing up under /Applications, but it sometimes takes an additional 5 minutes before their icons show properly and then all programs open properly without the aforementioned error message.
The dock icons stay as generic icons except for Finder and iCal, unless you wait a bit longer, and then the original icons are restored by opening each program on the Dock once... except for LaunchPad. Recreating the dock configuration restores the proper looking icons, except for three programs (Pages, Numbers, Keynote) which show a question mark.

Posted on Nov 25, 2015 4:01 PM