In your corporate network, how do you handle Mac OS X users on your Active Directory based network? What are some specific things you do to cater to the Mac OS users?
We are specifically having issues with the following:
Password expirations (specifically that there is no notification given to the user while they are logged in).
Finder not consistent about using kerberos. Browse to a windows server in "All..." and open a SMB share, you'll have to authenticate. However when you use Finder's "Go to Folder..." action or access via
smbclient -kthe system will properly use kerberos. Is this a bug? Is there any work around? Do you just mount the needed drives at logon? If so, how do you manage these login scripts?
VMs. Nearly everyone uses either Parallels Desktop or VMWare Fusion. Do you join these VMs to the domain as well? Do you do anything else special with VMs?
File share compatibility. If we let the Mac users use an SMB share on a Windows server, the Macs have to leave
.DS_Storeeverywhere for compatibility. Letting the Windows users use SMB on a Mac server is my best option, as the Mac users can use AFP (enabling the use of resource forks, instead of leaving .DS_Store everywhere). Additionally this will allow Mac OS users to use spotlight on the server mounts.
The directory application shows a number of system accounts, cluttering it up. Do your users even bother using this application? If so have you found a way to hide them?