Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 569
  • Last Modified:

Snow Leopard, Small Business Server 08, and Existing User Profiles

Hi Experts,

I am trying to join a few Snow Leopard systems to my SBS 2008 Domain.  I am able to bind to Active Directory, and most things seem to be working.  I have a somewhat serious problem though:

The Mac's have been in use for sometime so the users have their own profiles already configured.  When I join to AD and then log on with my domain user name and password it creates a new local profile for that user, just as with Windows.  In Windows I would just rename the profile directory or use a tool like Profwiz to do the trick.  Anyone know how I could do it here?

I tried the same trick (rename the user's home directory on the Mac) followed by some chmod/chown attempts but no joy.

Help!

Thanks!
0
dandnet
Asked:
dandnet
  • 4
  • 3
  • 3
2 Solutions
 
Britt ThompsonSr. Systems EngineerCommented:
Renaming isn't going to work because the users have a new UID and old profile is attached to their old local UID. You may be able to get it to work eventually by running chown, changing the UID or chmod but I doubt it would work smoothly. You can log in with the new user and type "echo $UID" to see the ID of the new user and type "dscl . -list /Users UniqueID" to see the list of local users' ID's and attempt to chown/change the UID associated with the files: "sudo find . -path "./Volumes" -prune -o -user <old user id> -exec chown <user name> {} \; -print" but this will render the old account useless.

I recommend simply changing the permissions for the old user directory files that are needed and copying them over to the new profile...Desktop, Documents, Music, Movies... and maybe some specific preferences like bookmarks, com.apple.printpresets.plist and you'll have a much smoother transition as opposed to forcing an old profile to work. I've tried to make this work and I ALWAYS run into ridiculous permissions issues with the accounts.
0
 
dccjCommented:
My experience is that there is not enough gained for the effort trying to gets Macs to play on Windows domains. Better to just connect shared folders and printers using domain credentials.
0
 
dandnetAuthor Commented:
Thank you, Renazonse.  Would be benficial for me to just copy the entire contents of /Lib/Preferences?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Britt ThompsonSr. Systems EngineerCommented:
I wouldn't copy the entire preferences directory because you're going to have to alter the permissions on every file in there for it to work...if you want to give it a try you can always rename the newly created preferences folder and replaced it with the modded old prefs folder. I've just run into too much trouble in the past with trying to do that. The worst thing to lose is the keychains and that's not going to get migrated no matter what you do.
0
 
dandnetAuthor Commented:
Thank you.  I actually meant HOMEDIR/Lib/Prefs....  I see what you are saying.  Maybe since it would be just that particular users preferences (and since only one user uses these machines) I'll give it a shot on one and see what happens?

Thanks again!
0
 
dandnetAuthor Commented:
So I think I'll be taking ICCC's advice and forget adding the machines to AD.  I'll use IMAP for the email.

I'm replacing an OS X Leopard server so I need to know if there is anyway I can export the mail from the IMAP folders on it and import them into Exchange.

Any ideas?
0
 
dccjCommented:
According to Apple, the Snow Leopard email client  directly supports Exchange, so can't you just copy the emails into the Exchange folders? I'm naive on how Mac email clients work, so this may be a stupid question!
0
 
dandnetAuthor Commented:
Snow Leopard supports Exchange, however if I do not authenticate via Active Directory I cannot use delegates (for Calendar) which is key for me.  Thanks anyway!
0
 
Britt ThompsonSr. Systems EngineerCommented:
dccj is correct, you can definitely just drag and drop the email from one account to another using IMAP or Exchange. If you were using Entourage or Outlook 2011 they support delegation and are highly operable as Exchange clients...the machines do not have to be joined to AD in that case.
0
 
dccjCommented:
Oh, last thing. Outlook 2011 only supports Exchange mode with Exchange 2010, not 2007 or 2003.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 4
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now