Updated February 3, 2012
The description of the initial problem and its resolution is intentionally left below for informational purposes.

UPDATE:  This issue should be resolved by the OS X 10.7.3 Update

We have tested OS X 10.7.3 internally, and have had customers confirm our findings that this latest update resolves issues with ".local" domains.

OS X 10.7, Lion, and ".local" domains

Apple has recently made a significant change in how the OS handles requests for ".local" name resolution that can adversely affect Active Directory authentication and DFS resolution.

When processing a ".local" request, the Mac OS now sends a Multicast DNS (mDNS) or broadcast, then waits for that request to timeout before correctly sending the information to the DNS server.  The delay caused by this results in an authentication failure in most cases.

There is an option to change the mDNS timeout in the Mac OS, and after changing this to the lowest possible number, we've been able to successfully authenticate and verify in our test environment.  This does not require any change to your DNS (Apple's "IPv6" solution), only that a command be run on the Mac.

Here are the steps to take to test this in your environment:

 - Log in to the Mac with a local admin account
 - Launch the Terminal (in the /Applications/Utilities folder)
 - At the command prompt, enter the following lines, each followed with the "return" key:

cd /System/Library/SystemConfiguration/IPMonitor.bundle/Contents/

sudo defaults write Info mdns_timeout -int 1

 - Enter your password when prompted
(The Terminal does not show that a password is being enterered.  Simply enter it, then hit return.)
 - Reboot

After restarting the Mac, you should be able to install and configure ADmitMac, join the domain, and connect to Windows shares.

Please Note:  This solution only works with OS X 10.7, Lion, and only affects ".local" domain login.  If you are using Mac OS X 10.6.8, Snow Leopard, please see this FAQ.  If your domain does not end in ".local", or if you have any other questions, please contact our Support Specialists at support@thursby.com

If possible, use copy and paste to enter the code. Make sure there are no spaces at the beginning or end of the code. Also, make sure your system date is set to today's correct date. You may also type the code in manually, with or without the dashes.

If you already have TCP/IP on your network, you'll need to contact your network administrator for any information necessary to configure your computer. If you have a simple network that doesn't already use TCP/IP, use the following information.

NOTE: Misconfiguring TCP/IP could interrupt other users on your network.

 If you are new to TCP/IP, you'll need a TCP/IP address and subnet mask for each computer you want to configure. Our suggestion is to use the following addresses:

Computer 1:
TCP/IP address: 192.168.0.1
Subnet Mask: 255.255.255.0

Computer 2:
TCP/IP address: 192.168.0.2
Subnet Mask: 255.255.255.0

Notice that the last number in the address is incremented for each computer. This set of addresses range from 192.168.0.1 to 192.168.0.254. The subnet mask is the same for every computer in this address range.

Neither ADmitMac nor DAVE is involved in the process of connecting an email client such as Outlook or Entourage to a mail server such as an Exchange server. Here is a link to Microsoft's support site with instructions on how to configure most Microsoft email clients for the Macintosh to connect with a Microsoft Exchange server:

http://www.microsoft.com/mac/support.aspx?pid=exchange

Sometimes a special configuration is required whereby you must configure a Hosts file on the Macintosh with the IP address and Name of the Exchange server. The purpose for creating the Hosts file on the Macintosh is to provide Name to IP address resolution of the Exchange server to the Outlook client. You can find details for HOSTS files at:
http://support.microsoft.com/support/kb/articles/q189/9/06.asp>

Information on creating a HOSTS file on Mac OS X can be found at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q294437

Additional information on this topic can be found at Microsoft's web site in Article #Q149596 Configuring Mac Client for TCP/IP and Outlook at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;149596

Here is more detailed information for configuring Outlook 2001 for Mac OS 9 to connect to a Microsoft Exchange server:
http://www.slipstick.com/outlook/mac/ol2001tips.htm

When the DAVE Setup Assistant for OS X launches, you receive these dialogs. Mac OS X requires verification before you can make changes to your system. The Administrator name, password or phrase referred to is one that you setup when you first installed and configured your Mac OS. You can find your Administrator name in the Users System preference on OS 10.1 or the Accounts System preference on Mac OS 10.2 or 10.3. If you have forgotten your password you will need to contact Apple to help you recover it.

These dialogs have no association with any user name or password you might use with DAVE nor are these dialogs associated with the license key you received for DAVE.

Both inkjet and PostScript inbound printer sharing are supported on OS X. DAVE and ADmitMac may be able to print to outbound inkjet printers attached to a PC. However, this functionality is not currently supported in the current version.

1. Select Applications / Utilities and Print Center. The Print Center will display.

2. Click Add Printer...

NOTE: (only if you are using Mac OS X 10.4 Tiger, you will get a screen where you will have to click on a button at the bottom that says "More Printers" to reach step 3).

3. From the top most drop-down sheet, select DAVE Printing (if using DAVE) or ADmitMac printing (if using ADmitMac) from the list.

* 4. Browse for the desired printer.

5. Select the printer model from the Printer Model drop-down list (Generic is the default).

6. Click Add. The selected printer will be added to the list of available printers in the Printer List.

* NOTE: If a printer name is longer than 12 characters or has illegal characters in the name, it may not display in the Print Center. Enter the printer address manually (ex: cifs://SERVER/PRINTER) or rename it on the Windows machine and try sharing and accessing it again.

If you use any special characters in the server name, you must change them as follows:

@ to %40
: to %3A
; to %3B
/ to %2F
<space> to %20

1. Select Apple menu / System Preferences... and select Apple's Accounts preference to setup local user accounts (in Mac OS 10.2) or setup local user's in DAVE Sharing (Mac OS 10.1.5).

NOTE: Make sure to select the Allow user to log in from Windows radio button.

2. Select the DAVE Sharing preferences (Apple menu / System Preferences...) to start sharing resources .

3. Select the Local radio button to begin sharing with local-level security.

4. Click on the Add Share button to add a resource to your list of shared resources. Or you can drag a resource to the shared resources window.

NOTE: You must manually turn DAVE Sharing on and off. Just adding a shared item will not cause DAVE Sharing to become active.

5. Click Setup Local Users to make the desired local users active then Done.

6. Click Add... to add local users. To remove or edit a share, select it then click Edit or Don't Share.

NOTE: If you're using Windows 95, Windows 98 or WIndows Me, you must set up a user account on the PC that is the same as the local user account on the Macintosh.

NOTE: When you are printing while logged into a Macintosh using ADmitMac be aware of the following:

� If you try to log out while a print job is printing, a message will display giving you an option to complete print jobs before log out; otherwise, the print jobs will be deleted.
� Also, any paused print job in the print queue that was not initialized by the currently logged in user will be deleted.

NOTE: Typing the URL is the best method of accessing a network printer. Also, if a printer name is longer than 12 characters it may not display in the Print Center. Enter the name manually or rename it and try sharing and accessing it again.

1. Select Applications / Utilities and Print Center. The Print Center will display.

2. Click Add Printer...

3. From the top most drop-down sheet, select ADmitMac Printing from the list.

4. Browse for the desired printer or add a printer manually (recommended) by entering its address in the Address field at the bottom of the ADmitMac Printing window. For example: cifs://sales.mycorp.com/colorprinter_2.

NOTE: Browsing for printers may not work in all networks.

5. Select the printer model from the Printer Model drop-down list (Generic is the default).

NOTE: The listed printers are PostScript. For non-postscript printers choose ESP and select the closest printer match.

6. Click Add. The selected printer will be added to the list of available printers in the Printer List.

Use the My Network Account system preference window to verify who is currently logged in, change or update your network password and to verify when your password expires. To change your network password:

1. Select Apple and System Preferences...

2. Select My Network Account.

3. Click the Change button. A password change drop-down will display.

4. Enter your new password.

5. Click Apply.

NOTE: You can only change your network password while logged into the domain. If you are logged into the Macintosh with a local Mac OS X account, this will change you local Mac OS X account password.

ADmitMac v5.1

To update ADmitMac to the latest version, you must run the installer while logged in to a local admin account. If you run the installer while logged in to a domain account, the installation might fail or cause damage to your domain account.

If you have already run the installer while logged in to a domain account, please log in with a local admin account and run the installer again. If the Setup Assistant runs automatically after the installer quits, please click through it - confirming settings - until it completes.

DAVE v8.1

DAVE should be installed while logged in as a local admin. Once installed, the Setup Assistant may run automatically. Please click through it - confirming settings - until it completes.