Evaluation and a couple of questions

User discussion forum for prior versions of ADmitMac
Post Reply
blake
Posts: 3
Joined: Mon Aug 05, 2013 12:09 pm

Evaluation and a couple of questions

Post by blake » Mon Aug 05, 2013 12:12 pm

Where can I find a list of the AD controls that ADmitMac will 'pick up'? (security banner, screen saver timeout, etc)

Is it possible to log in as multiple users (same domain) once installed? (not at the same time, but different domain users)

When we bind to AD the 'manual' way it displays my name as FIRST LAST - when I bind using the ADmitMac trial, it lists my name as 'flast' (it maps my samaccountname and not my display name' - is this normal?

Thanks

jim
Site Admin
Posts: 344
Joined: Wed Feb 23, 2011 5:10 pm

Re: Evaluation and a couple of questions

Post by jim » Tue Aug 06, 2013 9:55 am

blake,

I'll address the issues in order:

1. Group Policy Settings

The ADmitMac Administration Guide contains some of the settings we will apply by default, but here is a more complete list:

LANMan
SMB Signing
Computer Account password change
User Account password policies
User login restritions
Screen Saver timeout
Screen Saver authentication required


Are there specific settings you want or need to apply that are not?

2. Multiple users

Once the Mac is joined to the domain, any domain user can log in. We have a number of "EDU" customers that use ADmitMac on lab/class computers that have different users logging in multiple times a day. A "Network Home Folder" configuration is usually best for this, but it will depend on the number of users and how they access the network.

3. There is a bit of a difference in the order in which ADmitMac reads AD attributes than Apple's built-in AD client. ADmitMac will default to using the sAMAccountName to creat the user's home folder, and may use the UserPrincipleName for the display. This is a configurable option, though, if your workflow requires one or the other.

I hope this information helps. Please note: This forum is for user discussion of ADmitMac v7, and is not intended as a primary source of technical assistance.
If you require technical support, please contact us at support@thursby.com.

Regards,

Jim Thomas
Senior Support Specialist

blake
Posts: 3
Joined: Mon Aug 05, 2013 12:09 pm

Re: Evaluation and a couple of questions

Post by blake » Tue Aug 06, 2013 3:46 pm

Very helpful - would followup questions be best submitted to this forum or sent to support directly? I'm trying to make the case that we should invest in this software for our Mac users and any help you provide is appreciated.

Blake

jim
Site Admin
Posts: 344
Joined: Wed Feb 23, 2011 5:10 pm

Re: Evaluation and a couple of questions

Post by jim » Tue Aug 06, 2013 3:49 pm

Blake,

You can ask questions here in the forum. If it were to turn into a 'support' issue where we are gathering information and log data, then we would rather handle it directly.

Regards,

Jim Thomas
Senior Support Specialist

blake
Posts: 3
Joined: Mon Aug 05, 2013 12:09 pm

Re: Evaluation and a couple of questions

Post by blake » Tue Aug 06, 2013 4:12 pm

Thanks very much Jim. My followup questions (so far) are:

1) We installed the trial version on a test system and the ability to logon as 'another' domain user seemed to disappear. There were clickable icons for two local users and a single domain user, but the user (our resident Mac expert) didn't see any obvious way to log in as 'any' domain user.

2) I think we'd prefer if we could show the 'Display Name' or other field from AD rather than samaccountname if possible. (the 'old' way they see First Last and using ADmitMac they see only their employee number)

3) From what I can tell the Mac setting for 'screen saver timeout' is a dropdown, where in AD it's a numerical field. The point - if AD is set to something goofy (like 63 minutes) - what will the Mac use for that value?

Thanks again,
Blake

jim
Site Admin
Posts: 344
Joined: Wed Feb 23, 2011 5:10 pm

Re: Evaluation and a couple of questions

Post by jim » Wed Aug 07, 2013 12:13 pm

Blake,

1) Once ADmitMac is installed and bound to the domain, the Login Window should include "Other" as an option to allow domain login. If you do not see "Other" displayed with the locally stored accounts, there are a number of things that could cause this. The best thing to do will be to contact us at support@thursby.com with a description of the issue, a brief description of your network (including domain name, for reference), and OS versions in use.

2) The user's name will display differently depending on the Home Folder configuration you decide to use. I would recommend contacting us for assistance in determining which home folder configuration best suits your needs.

3) ADmitMac will take the value from Group Policy and apply it to the Mac. If it's set to 63 minutes, that's when the Mac should kick in the screen saver.

Regards,

Jim Thomas
Senior Support Specialist

Post Reply