Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Active Directory Allow administration by

On Jul 28, 2004, at 9:23 AM, Brett Decarion wrote:

It true that the user could sudo and kill half the directory structure on
the computer but since we use Radmind to maintain our labs that's not a big
concern.


If your students are admins, they can prevent radmind from running.

The student accounts only contain 8 groups. Some of the staff have as many
as 30 or 40 but, for example, not all of mine are coming across. I have 17
groups total but only 14 are showing up... Wait, I just re-read my original
post and realized that there are 16 groups. 2 are local to the client
computer and 14 are coming in from Active Directory, so that makes sense.
But why the student AD groups are not even showing up I don't know, as the
test system I have has been running for over 2 weeks without so much as a
reboot or any changes to the AD plug-in.

You can try putting the DirectoryService daemon into debug mode:

<http://www.4am-media.com/modules.php? name=FAQ&myfaq=yes&id_cat=2&categories=Open+Directory+Server#22>

The AD Plug in is usually pretty verbose about what it is doing.

http://www.4am-media.com
Mac OS X Consulting and Training
Michael Bartosh
email@hidden
303.517.0272
Denver, CO


"The surest way to corrupt a youth is to instruct him to hold in higher
regard those who think alike than those who think differently."

- -- Nietzsche
_______________________________________________
maclabmanager mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/maclabmanager
Do not post admin requests to the list. They will be ignored.

References: 
 >Re: Active Directory Allow administration by (From: Brett Decarion <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.