How To: Script Generating a Kerberos Ticket Granting Ticket (TGT) during an Active Directory user’s initial login

Standard

I had this issue with a drive mapping app i create not mapping drives at initial login for AD accounts (this app will be discussed in another post shortly).

The Apple KB with the same title as this post advises how to fix, but if you wish to script it do the following:

WARNING: TEST, TEST, TEST THIS. ADDING AN EXTRA CHARACTER CAN LEAD TO YOUR MAC BEING STUCK IN A LOGIN LOOP. THE BELOW SHOULD BE ENTERED ON 2 LINES

How To: Allow All Users To Add Or Remove Printers

Standard

Apples KB article on this, gives examples on how to add a network group or mobile account user to the lpadmin group.

If you simply wish each mac account to be a member of the lpadmin group, run the following:

sudo dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin

How To: Connect Clients To Lion Servers Apple Software Update Service

Standard
UPDATE: Apple have now posted a support document verifying the above, it's available here.

In 10.6 Apple release unified the ASUS url into http://myserver.fqdn:8088/index.sucatalog as per the this page. This same URL will work for 10.7 clients too.

How To: Change Lions Scroll Direction

Standard

This confused me for a while!!

The default scroll behaviour in Lion is in the direction that your finger is moving in, like iOS. Not the inverted scroll used for years.

To change, open System Preferences > Mouse & untick “Move content in the direction if finder movement when scrolling or navigating”

Installing Adobe Unit Types 2.1.0

Standard

This post advises why you may need to update the Adobe Unit Types.osax file & how to do so using Casper.

The Adobe Unit Types.osax file that shipped with Photoshop CS4 and CS3 is a 32-bit component. Mac OS X 10.6 (Snow Leopard) requires some 64-bit scripting environments.

This file is placed in /Library/ScriptingAdditions/ & can cause Applescripts to fail to run.

Both Adobe & JAMF have posted help docs on how to fix this & this post is to advise how I’ve deployed to corrected osax file to affected machines.

Continue reading

Set Start Screen Saver To A Hot Corner

Standard

To set start screen saver to a hot corner, run the following as a policy in Casper.

Continue reading

Setting User & OS Language Post Install from Casper

Standard

We need to have different configurations etc based on  the major european languages.

We were orignally looking at setting the OS Language via the custom os install options, but have been advised by JAMF that this does not work.

So we needed a work around to achieve the same.

I’ve got this working by narrowing it down to 4 plists… I’m then editing these for each language needed & making Composer dmg’s of each plist to distribute.

The upside of using this method is that we can use a single config per OS version with smart configs based on it that change the language as required.

Basically, make the changes & copy the below files:

Continue reading

Setting the default user settings in Universal Type Server v2

Standard

We’re using Universal Type Server (UTS) for our Font Management, UTS is set to authenticate against our AD with security groups giving access to various Font Workgroups.

As we’ve such a large AD, we’re using an MS SQL Database to host all of our user records.

This is all working well, except the default user settings are as per the above, the below advises what we wished to change the default setting to and how this was accomplished.

Continue reading

How To: Set OSX’s Screen Saver via Script

Standard

Throughout my career as a Mac Admin i’ve often been asked to enforce a screen saver. One environment required a screen saver to always be set, but to allow people to change the desktop background. Another required a screen saver to be set to the corporate standard at each login. This script has been used in both environments to great affect.

Continue reading

Unlock Each Secure System Preference & Allow All Users To Unlock

Standard

UPDATE: The below has been superseded by the post found here. I'd also advise looking at authbuddy instead of the below

The below will untick the option System Preferences > Security > “Require Password To Unlock Each Secure Preference” & allow all users to unlock these preferences.

Continue reading