Archive for the ‘Windows’ Category

Helpful group policies

Thursday, April 3rd, 2008

More helpful group policies will be added to this page as time goes on. 

Redirect My Documents folder
User Configuration > Windows Settings > Folder Redirection
My Documents

IE7 pop-up allow list
User Configuration > Administrative Template > Windows Components > Internet Explorer
Pop-up allow list

Bulk user utility

Wednesday, November 28th, 2007

Requirements

  • Filemaker Pro 5 or 6
  • Microsoft Word or text editor (to replace tab breaks with line breaks)

This is a utility I have created to help import users into Active Directory with all the Mac information as required by our implementation. The utility will also output a script to create the home directories on the (OS X) file server and assign permissions.

The utility is a Filemaker Pro 6 database and thus requires a copy of Filemaker to run.

The software is provided “as is” and does not include any product support. I plan to add instructions to this page when time permits.

Download the utility Bulk/New user utility (version 0.7)

Office 2003 deployment via Group Policy

Wednesday, November 28th, 2007

Requirements

  • Office 2003 install discs
  • Active Directory Server
  • User management MMC snapin

Create Network Installer

  1. Run the setup off the CD with the /a switch (Start>Run>D:\setup.exe /a)
  2. Share the folder Office is installed into (read only)
  3. Run Resource Tools Setup off the CD
  4. Run Custom Installation Wizard
  5. Add to group policy

Group Policy: User based

Installs at login

Installs to a organisational unit of users:

  1. Right click OU and select properties
  2. Click Group Policy and create a new one or modify an existing policy
  3. Add software installation to user configuration
  4. Advanced tab
  5. Modifications: Add the file that was created by the Custom Configuration Wizard.

Group Policy: Computer based

Installs at next startup

  1. Move computers into an organisational unit
  2. Right click OU and select properties
  3. Click Group Policy and create a new one or modify an existing policy
  4. Add software installation to computer configuration
  5. Advanced tab
  6. Modifications: add the file that was created by the Custom Configuration Wizard.

Bulk importing users into Active Directory

Wednesday, November 28th, 2007

Requirements

  • Microsoft Excel or spreadsheet program to create csv, otherwise any text editor to do it all manually

This method is used to simplify the creation of users in bulk and to include all of the information Mac OS X requires such as home directory location.

To import users into AD, I use “csvde.exe -i - f path/to/file” to read a comma delimited text file and import the users into the Active Directory. This method seems to work well for Warilla, but unfortunately, all accounts need passwords set manually. DET has a licence for a peice of software called Hyena that can reset multiple passowrds.

I have included a table below with the fields and an example of the data in them. It is initially made in Excel with the concatenate function to create the required information from a users first name and last name.

dn CN=Joe BIGGS,OU=ImportedStaff,DC=warilla-h,DC=schools,DC=nsw,DC=edu,DC=au
givenName Joe
sn BIGGS
description Staff
postalCode 2001
telephoneNumber 200
sAMAccountName bij
homeDirectory \\\\osxhomes1\\staff\\bij
streetAddress afp://osxhomes1/staff bij
info /Network/Servers/osxhomes1/staff/bij
homeDrive Z:
displayName Joe BIGGS
userPrincipalName bij@warilla-h.schools.nsw.edu.au
objectClass user

The information should be arranged into column not rows as displayed in the data example above. A sample of what the text file should look like is included below:

dn, givenName, sn, description
CN=Joe BIGGS,OU=ImportedStaff,DC=warilla-h,DC=schools,DC=nsw,DC=edu,DC=au, Joe, BIGGS, Staff

Save the file as in CSV format. Then open a command prompt on the directory server. Enter the following command:

csvde.exe -i -f path/to/file

You should be presented with a bit of information, and a heap of . . . . . to indicate each record that has been successfully imported.

Check to make sure the users have been imported into the Active Directory. By default, hey will be disabled and have no password.