Environment: Active Directory fores and domain at the 2008 functional level. No open directory or golden triangle. Casper joins macs to the domain no problems. Users have AD accounts. Some have home directories set, some don't.
If an AD user without a home directory set logs into any mac also joined to the domain, everything works great. No issues.
If an AD users with a home directory logs onto a 10.8.x mac also joined to the AD, everything works great. Home directories mount, everything is golden. I have tried with several different users who are members of several different groups having home directories on different Windows servers (both 2003 and 2008).
It all breaks when the exact same user (with the home directory settingss) logs onto a 10.7.5 mac (also joined to AD). One of two things happens:
- if the home directories ntfs permissions grant that user "ownership" of their directory the user can't log on at all. I get the message saying "Logging in to the account failed because an error occurred." That's it, the user never logs on.
- If the home directory ntfs permissions are set to everyone full control with inheritance at the top of the directory structure, the user can log on, but an error message comes up saying that an error occurred when connecting to "servername" but it at least lets the user logon. There is a question mark icon where the home directory should be on the dock. I can then go and connect to the server with the SMB path, it asks for the users credentials which I put it and then it will mount the directory. And that is only if there are basically no permissions set to the entire share and directory tree.
What gives? We have hundreds of 10.7.x machines. I can't have users only be able to log on to the new ones and not the old ones.
