Mac – XCode 4 on Mt Lion

Apparently, Apple no longer installs the command line tools for XCode automatically.  Once you install XCode you need to go to the Preferences, then Downloads to install these as an extra step …

http://stackoverflow.com/questions/11705912/upgrading-to-mountain-lion-and-xcode-4-broke-my-make

 

Posted in Labs, Software | Tagged , | Comments Off on Mac – XCode 4 on Mt Lion

Mac – Software Packaging Reference

 

A good article on re-packaging software for Macs that includes links to useful tools:

http://www.mactech.com/articles/mactech/Vol.25/25.01/2501MacEnterprise-PackagingforDistribution/index.html

Posted in Software | Tagged , , , | Comments Off on Mac – Software Packaging Reference

Mac – What makes a volume bootable

 

To quote from the link below:

Bootability comes down to a few simple rules:

  1. The hard drive enclosure must support booting a Macintosh (applies to external hard drives only)
  2. The computer must support booting from the interface used to attach the hard drive (e.g. USB, Firewire, eSATA)
  3. The computer must support booting from the hard drive’s partition format (e.g. APM vs GPT vs MBR)
  4. The cloned filesystem must have all the required components of Mac OS X
  5. The cloned operating system must be properly “blessed”

 

See the complete info at:

http://www.bombich.com/software/docs/CCC/en.lproj/troubleshooting/what-makes-a-volume-bootable.html

Posted in Labs | Tagged , | Comments Off on Mac – What makes a volume bootable

Kiosk – Group Policy Changes

Group Policy Changes for the Kiosks/Public computers:

Disable Switch User

Computer Config – Admin Templates – System – Logon – Hide entry points for Fast User Switching ….. Set to “Enabled”

Disable Lock Computer -(done in two policies)

User Config – Admin Templates – Control Panel – Personalization – Password Protect the screen saver … Set to “Dsiabled”  (Lock button still appears but it doesn’t do anything)

User Config – Admin Templates – System – Ctrl+Alt+Del+ Options – Remove Lock Computer … Set to “Enabled”

Remove Logoff – (needs two policies as well)

User Config – Admin Templates – Start Menu and Taskbar – Remove Logoff on the Start Menu … Set to “Enabled”

User Config – Admin Templates – System – Ctrl+Alt+Del+ Options – Remove Logoff … Set to “Enabled”

Disallow Change Password –

User Config – Admin Templates – System – Ctrl+Alt+Del+ Options – Remove Change Password … Set to ‘Enabled”

Remove Task Manager —

User Config – Admin Templates – System – Ctrl+Alt+Del+ Options – Remove Task Manager … Set to “Enabled”

Posted in Labs | Tagged , , , , | Comments Off on Kiosk – Group Policy Changes

Software – JMP 10 – Silent Installer

To create a silent installer for JMP …

First run setup.exe to collect the responses in a response file.  This will not actually install the software.

setup.exe -r -f1{response file name}

Then, to actually install with those responses from a script,  run the setup.exe file again giving it the named response file:

setup.exe -s -f1{response file name}

Note:  There is no space between the “F1” and the file name.

For more details see the web page at:

http://www.jmp.com/support/notes/8/135.html

Posted in Software | Tagged , | Comments Off on Software – JMP 10 – Silent Installer

Software – Endnote Deployment

Windows:

Like other software, you need to run a utility program supplied by the vendor “Admin.exe” to convert the installer to the deploy-able site-licensed version of the installer.  To get the Admin.zip folder see the web site at:

https://support.clarivate.com/Endnote/s/article/EndNote-Volume-License-Install-Steps?language=en_US

After adding the license data and creating a new installer, you can install this with the following command:

msiexec.exe /passive /i EN20Inst.msi INSTALLDIR=”C:\Program Files\EndNote” FFTUSEOPENURL=T FFTOPENURLRESOLVER=https://na02.alma.exlibrisgroup.com/view/uresolver/01_WIL_INST/openurl

This command installs EndNote With the correct Find Full text Url preset for all users.

Mac:

  1. Make sure Microsoft Word is already installed
  2. Install EndNote from vendor supplied, Williams’ licensed dmg
  3. Create a Preference file for the Find Full Text URL
    1. defaults write /Library/Preferences/com.ThomsonResearchSoft.EndNote.plist openURLPath https://na02.alma.exlibrisgroup.com/view/uresolver/01_WIL_INST/openurl
  4. Open EndNote – To Add EndNote menu to Microsoft Word
    1. Run “Customizer” and select CWYW then  install
  5. Using Jamf Composer or any other package tool, package:
    1. /Apllications/EndnNote 20
    2. /Library/Preferences/com.ThomsonResearchSoft.EndNote.plist
    3. /Library/Application Support/Microsoft/Office365/User Content.localized/Startup.localized/Word/EndNote CWYW Word 16.bundle

\

Posted in Software | Tagged , , | Comments Off on Software – Endnote Deployment

KeyServer – Client specific files that should not be included in cloned image

Before Capturing any master image be sure to delete these files:

(For details see: http://www.sassafras.com/hrl/7.0/clone.html )
The following is from the above link …

Windows file list

The following files and directories should NOT be copied from one computer to another:

KeyAccess Audit, which is located in one of these directories depending on OS version and KeyAccess version:
C:\ProgramData\KeyAccess\
C:\Documents and Settings\All Users\Application Data\KeyAccess\
C:\Documents and Settings\All Users\Application Data\
C:\ProgramData\
C:\WINDOWS\
C:\WINNT\
KeyAccess Offline, which is located in one of these directories depending on OS version and KeyAccess version:
C:\ProgramData\KeyAccess\
C:\Documents and Settings\All Users\Application Data\KeyAccess\
[User Profile Dir]\Local Settings\Application Data\
C:\WINDOWS\
C:\WINNT\
portable.dir, which is a directory and is located in one of these directories depending on OS version and KeyAccess version:
C:\ProgramData\KeyAccess\
C:\Documents and Settings\All Users\Application Data\KeyAccess\
[User Profile Dir]\Local Settings\Application Data\
C:\WINDOWS\
C:\WINNT\
[Any Drive]:\portable.dir\

The following registry settings should NOT be copied from one computer to another:

registry: HKEY_CURRENT_USER\SOFTWARE\Sassafras\KeyAccess\Settings\pref
registry: HKEY_CURRENT_USER\SOFTWARE\Sassafras\KeyAccess\Settings\settings
registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KeyAccess\Settings\pref
registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KeyAccess\Settings\settings

Note: The KeyAccess client install creates a keyacc.ini file in the windows directory even when you accept the default, “store settings in registry”. The line, “registry=2” in keyacc.ini tells KeyAccess to consult the registry for additional settings, so keyacc.ini must be included in the cloned image. If you have customized the client install (using the k2clientconfig utility) so it stores all settings in the keyacc.ini, then this file must be edited before cloning. Remove all lines beginning “previd” or “prevhw”.
OS X file list

The following files should NOT be copied from one computer to another:

/var/root/Library/Preferences/KeyAccess Audit
/var/root/Library/Preferences/KeyAccess Offline
/var/root/Library/Preferences/KeyAccess Prefs
/var/root/Library/Preferences/Portable Keys (don???t move)/ — nothing in this directory should be copied to another computer
/Library/Preferences/KeyAccess/KeyAccess Audit
/Library/Preferences/KeyAccess/KeyAccess Offline
/Library/Preferences/KeyAccess/KeyAccess Prefs
/Library/Preferences/KeyAccess/Portable Keys/ — nothing in this directory should be copied to another computer

If you want cloned clients to point to the same KeyServer as the computer you took the image from, you should be sure to copy the file /Library/Preferences/com.sassafras.KeyAccess.plist

Posted in Labs | Tagged , , | Comments Off on KeyServer – Client specific files that should not be included in cloned image

Windows – Novell settings for Lab image

Novell Client Settings used on 2013 Windows Lab image (the novell client is not used on Mac OS)

set novell client login link on users desktop to a shortcut to c:\windows\system32\loginw32.exe

In Novell Client Properties …

Set Client Props –

LDAP Contextless Login Tab:

  • Enable LDAP Contexteless login
  • Enable LDAP Treeless login
  • Enable LDAP Context Search Scope
  • Trees = o=williams
    • Search Context and Subtree
      • ou=student,o=williams
      • ou=faulty,o=williams
      • ou=staff,o=williams
      • o=williams
  • Servers
    • nwldap.williams.edu
    • nds1.williams.edu
    • nds2.williams.edu

Service Location Tab:

  • Scope List
  • o=williams

 

Advanced Login Tab

  •  Use all defaults except for these:
    • Computer Only Login Default – Always
    • Forgotten Password Prompt – Off
    • Last Loged In User – Off
    • Logged In Profile List – Off
    • Novell Logon – Off
    • Show login Windows password sync – Off
    • Supress NMAS Support for Computer Only Login – On
    • Tree Box – Off
    • Use NMAS for Windows Login Default – Never

Once all this is set you need to save by clicking OK and then reboot.  Next try to log into Novel which will likely fail with can’t find the server … Then log into the computer and go back to Novelll Client Settings and set :

System Login Profiles Tab (this is not be available until after first login attempt)

  • Default – eDirectory Tab:
    • Trees = WILLIAMS
    • Contexts = williams
    • Servers = achilles
Posted in Labs | Tagged , | Comments Off on Windows – Novell settings for Lab image

Lion – AFP – Change secutiy setting to allow connections to legacy file servers

Lion has upped the anti on AFP security. To connect to older, legacy Novell servers one needs to do the following …

sudo chmod o+w /Library/Preferences
sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_host_prefs_version -int 1
(creates the file)

Connect to an AFP server like MacSus to populate file created above

sudo defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
(to see a list of the disabled login methods)
sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array
(to remove all from disabled list)
sudo defaults write /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams -array “Cleartxt Passwrd” “MS2.0”
(to keep a few disabled – I don’t know which are the problem so I undisable all of them)
sudo defaults read /Library/Preferences/com.apple.AppleShareClient afp_disabled_uams
(to confirm the change)
sudo chmod o-w /Library/Preferences
(to reset the directory prefs)

For details see:
http://support.apple.com/kb/HT4700

Posted in Labs | Tagged , , | Comments Off on Lion – AFP – Change secutiy setting to allow connections to legacy file servers

BootCamp – Imaging windows with winclone

Using a lab windows image on a dual boot mac —

  • Prepare a base windows image in Dell hardware and sysprep
  • Take an image with KACE/Ghost but don’t allow drive to boot after
    • With ghost you need to uncheck “Reboot” in the Misc Options before starting to take image
  • Physically remove hard drive from dell hardware and put it in a Mac Pro Tower but don’t let it boot yet
  • Use an external disk that has winclone loded on it to boot the mac
  • Take a winclone image
    • Before taking winclone image, set perferences to use the “special” format that is not mountable but is smaller and restores faster.

This image should then be restorable to any bootcamp windows partition using the external mac boot disk and winclone as above. After restore you’ll need to boot to the windows volume, letting sysprep complete and then run the bootcamp drivers disk for that mac model.

Add any additional software/settings, re-sysprep, and then take an image of the windows volume with DeployStudio.

Posted in Labs | Tagged , , , , , | Comments Off on BootCamp – Imaging windows with winclone