Using the so called "magic triangle" technique, you can have two directory
services (AD, and Open Directory), then duplicate or make new groups in Open
Directory that you can manage with WGM, then populate them with users from
AD. Apple's solution does not let you manage desktop (MCX) settings for
users without changing the AD schema.
With ADmitMac, you don't' need the Open Directory, and can manage users,
groups and computers/computer lists without changing your AD schema. You
just run WGM and it works.
Paul
> From: "Berrill, Rich" <email@hidden>
> Date: Wed, 31 Aug 2005 13:54:51 -0500
> To: Paul Nelson <email@hidden>, Everett Littles <email@hidden>,
> <email@hidden>
> Conversation: Confusion on Managed AD Users
> Subject: RE: Confusion on Managed AD Users
>
> Are you trying to manage preferences at the User group or computer
> level? I know I'm able to manage preferences just fine at the group and
> computer level with AD users. I just add them to OD groups and it works
> np.
> -----Original Message-----
> From: client-management-bounces+rberrill=email@hidden
> [mailto:client-management-bounces+rberrill=email@hidden] On
> Behalf Of Paul Nelson
> Sent: Wednesday, August 31, 2005 1:45 PM
> To: Everett Littles; email@hidden
> Subject: Re: Confusion on Managed AD Users
>
> You need to change your schema or use ADmitMac from Thursby, which
> allows
> you to use WGM without changing the schema.
>
> Paul
>
>
>> From: Everett Littles <email@hidden>
>> Date: Wed, 31 Aug 2005 11:33:48 -0700
>> To: <email@hidden>
>> Subject: Confusion on Managed AD Users
>>
>> I would like to have all of my OS X users authenticate against my
>> Windows 2003 Active Directory. However, I would like to have them
>> managed by WGM. So I connected my 10.4 Server to my AD server and
>> that appeared to work fine. I then tried to go into WGM and start
>> managing preferences like default home page, but receive an Error
>> -14140 when trying to actually apply the settings. Do I need to
>> change something in my AD schema to allow these changes to be made? I
>> followed the AD-OD integration paper from afp548 but maybe I am
>> missing something.
>>
>>
>>
>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Client-management mailing list
> (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
> http://lists.apple.com/mailman/options/client-management/nelson%40thursb
> y.com
>>
>> This email sent to email@hidden
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Client-management mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
> http://lists.apple.com/mailman/options/client-management/rberrill%40jjc.
> edu
>
> This email sent to email@hidden
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Client-management mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/client-management/email@hidden
This email sent to email@hidden
