Hi All,
We have a problem here with 10.11, where now that the Printers have moved to the User profile, we have to allow execute access to the Library... Simple, right? Wrong!!
After adding ~/Library to the allowed folders, ~/Library was not allowed, so I added /Users/$USERNAME/Library to the allowed folders, still not allowed, so I just added /Users, and... It worked... but that means that any Application on the user desktop can be executed. Now, some might say, well then disallow the Desktop, etc.... Guess what, it doesn't work!
So, after much hair tearing, swearing, and using the name of Jobs in vain... I found the issue, I just don't know how to fix it...
All of our machines are joined to a rather large AD domain, The diocese wide domain, with an identity management system, that I have no control, or ability to alter, and in their intelligent "Windows Centric" world, they have upper and lower case characters in their usernames, for example one of our students could be JSmith99, or JChris98, which is fine, but... When the /Users folder is created for them, it is created as jsmith99 or jchris98... So the profile is allowing access to /Users/JSmith99/Library not /Users/jsmith99/Library where the issue actually is!!
I have no idea why ~ is not working in a profile, i'll assume that is a bug too!!
Does anyone have a way around this?
Thanks.
