Solved

User accounts on Mac clients - adding the Mac's to a Magic Triangle domain

Posted on 2013-11-06
1
543 Views
Last Modified: 2013-11-07
We have 50 Mac Book Air laptops that will soon be added to our new Windows Server 2012 Active Directory domain. I'm also building a Mac OS X Server (Mavericks) to handle the GPO-type control for the Mac's. In the Magic Triangle, the Mac client authenticates against AD as well as Open Directory on the Mac Server, that's my understanding.

I'm figuring out how best to handle the existing user accounts on the laptops. I see 4 options:

1) Keep local Home Directories on the laptops (not ideal for data backup purposes)

2) Convert the account to a Mobile account (but disable file syncing according to this article:

http://robotcloud.screenstepslive.com/s/2459/m/5322/l/112405-creating-network-mobile-accounts-with-local-homes


3) Convert it to a Network account

4) Create a new user account with a unique account name that doesn't match the existing user accounts. But not sure if this really buys me any benefits over other choices.

So far it seems we'll have to have Mobile accounts so people can log onto their laptops when out of the office. Anyone gone through this sort of integration yet & can share your suggestions for what might work best with how to handle these existing user accounts?

Thanks.
0
Comment
Question by:WineGeek
1 Comment
 
LVL 32

Accepted Solution

by:
nappy_d earned 500 total points
ID: 39630085

1.

Definitely do not keep the current local directories.  Migrate them to the new home folder location on your network.  Use this command to accomplish this sudo scp -Epr /Users/username root@server.example.com:/Users/username

The only thing to be careful of is diskspace.  In the end however, once you are setup you will have the ability with OD(Open Directory) and user preferences to specify what types of data gets sync'd to the server for backing up of the mobile accounts(roaming profiles to Windows admins)

2.

I do not recommend disabling file syncing.  If the end result is to have a backup of user profile data, this this is not what you should follow as per the article. As I menetionin in step one, you can use system preferences to reduce the type of data you sync between the client and the server.  You can even limit this by file types.

3.

The command I mentioned in step 1 will allow you to migrate the accounts.  For more detailed steps, please see this article from Apple.  http://support.apple.com/kb/HT5338

4.

Because you are using the Golden Triangle, your user info is going to be pulled from AD.  I think it's justa matter of training staff to use the new usernames you create for them in AD.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now