OS X Lion and a Windows 2003 Network

Posted on 2011-10-11
Last Modified: 2012-06-21

We have just been asked to install several OSX Lion Macbooks onto our Windows 2003 Domain.  We also have the Home Directorys located on a Windows 2008 Storage Server
which are mapped during a GPO Login Policy.


I have managed to bind the laptops to the Domain and they can now logon using the domain account.  But what is the best policy and how do you advice that the home directory / shares are mapped.

Question by:Mongo Peck
    LVL 51

    Expert Comment

    Do this on the AD Account directly.  On the profile tab.

    As for other shares, that will need to be done from the MAC.  

    At least there's only a few of them!

    Author Comment

    by:Mongo Peck
    Thank you ...

    However this has "for me" the following problems.

    When a Mac User goes home the work directory is missing .... is there a way I can have it copied to the laptpo or vice-versa.

    How do I stop the user having to manually connecting to his group share,  I did place a alias on the desktop but this again caused "out of office errors"

    Thank you in advance.
    LVL 51

    Expert Comment

    I'm not sure how one would sync an offline file store on a MAC, but I'll check into that since I have a MBP here at home too.

    Not sure about the auto-connect to share either - I will also check that out here.

    Sorry to be a little vague, but I didn't have my MBP at work to look at when I posted.

    Be back soon.
    LVL 51

    Expert Comment

    Ok it looks like when you bind to AD you can "create mobile account at login" in the Advanced Section under user experience.  This should create a local "profile" for the network account to allow login when not on the domain.

    You can also specify to use the UNC path from AD to derive the network home location - and select SMB as the protocol.

    Still looking at the sync issue.
    LVL 51

    Accepted Solution

    Ok, the function of the mobile account also creates what is known as a Portable Home Directory that is synchronized automagically.

    For the share, read through this:

    It explains how to create it then make it mount automatically when available.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Suggested Solutions

    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now