I manage a lab of about 60 2015 5k iMacs that all dual boot OSX 10.11.6 and Windows 10. All computers are bound to our Active Directory so that students can log in. Adobe CC 2015.5 works without any problems on the Windows side. However, it seems that the entire Adobe suite keeps breaking with Configuration Error 16 for both AD users and the admin accounts on the OSX sides. Since Adobe's official "Fix" for Configuration Error 16 is to set the correct permissions for the SLStore and Adobe PCD folders, I wrote a script to repair the permissions that is deployed through a policy that is triggered on logout. I included the permission fix in a script that deletes the previous AD account from the computers on logout.
I first tried adding these two commands to the script:
chown -R root /Library/Application\ Support/Adobe/Adobe\ PCD/
chmod -R 644 /Library/Application\ Support/ Adobe/Adobe\ PCD/
but that still didn't fix the problem, so I took them out of the script.
I also have a script set to run on logout that repairs the default (AD) user profile permissions, which is just:
#!/bin/sh
chown -R root /System/Library/User\ Template/English.lproj/
I chose two computers to test, one with CC working on an AD account and one with CC broken on an AD account. Here are pictures showing the permissions for the SLStore and Adobe PCD directories. First, these are the permissions on the computer where CC was working when I logged in on an AD account:
Since that one was working, I logged out and logged in to the second computer with my AD account. On this computer, CC was NOT working and was giving the Configuration Error 16, which is strange because all the permissions seem to be the same as on the previous computer.
I then logged out of my AD account and logged in to the admin account (computersupport) on the same computer and suddenly CC was working again. Here are the permissions:
Since THAT computer was now working, I logged out of the admin account and back in to my AD account, and CC was working fine. Here are the permissions:
The weird thing is that the "login to admin, logout, login to AD account" process doesn't fix the problem on all the computers. For the most part, most of them give the error no matter what I do, but every computer in the lab gets the same policy with the permissions fix scripts. I'm pretty new to scripting, so I can't tell if my scripts have any problems. All I know for sure is that the AD users are being deleted on logout.
All other applications work fine on the OSX sides. Does anyone have any idea's as to what I'm experiencing?
Thanks.