Synchronising accounts on desktops

[rsebasti]

We have tons of desktop images rolled out with a novell signon to the local server and generic user account on each PC for the windows XP signon.

We need a way to sync the Novell signons with the windows account copying the generic profile to this new account per PC.

Anyone have ideas or solutions?

========================================
I learnt the most
when I stopped talking...

 

[terry712]

use a zen dlu policy so that the account is created properly as themselves.

the generic profile you could script so it's either renamed and permissions applied or a copy to new profile on creation

 

[TheLad]

I agree. Zenworks is ideal for the scenario you refer to. DLU stands for Dynamic Local User. Basically, when someone logs on using their NDS credentials, a local account is automatically created with credentials to match. To the user, it looks as if they have logged in once when in reality they have logged on once to NDS and the system has done the rest to get them logged onto the workstation.

You can also configure DLU to be volatile. Basically this means that when someone logs out, their local account is automatically removed from the workstation. This is just a security thing and doesn't affect the users as they get a new account created when they log on next.

-----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------

 

[rsebasti]

But what if you don't have Zen

========================================
I learnt the most
when I stopped talking...

 

[marvhuffaker]

Buy it.

The only other option (if you call it that) is to have an AD domain that the local workstation is part of. I have to assume you don't or you'd probably already be using it. Doing it with AD makes it so you have 2 different accounts for each user. One in eDir, on in AD. And you still have to make sure that the passwords are synched to make it seamless, and you also have to manage the login process itself to make sure that both logins being used are the same. Much more hassle for YOU the admin. AD actually complicates things more than what you are currently doing.

IMEO, ZENWORKS is a much better option. This is something that I could elaborate on and show examples etc, but this is enough for now. The cost of implementing ZEN is much less than the other options. It's much more functional. And day to day management costs are minimal.



Marvin Huffaker, MCNE

http://www.redjuju.com