GrokLocalMCX.pdf资源-CSDN文库

版权申诉

5 浏览量 2024-03-23 15:45:05 上传评论收藏 1.8MB PDF 举报

资源推荐

资源详情

资源评论

Grok Local MCX

And Managed Preferences In General

This outline was created for the PSU Mac Admins Conference, May 12th, 2011

Intro - Separate the Dirty from the Quick

Getting Reacquainted with Prefs

Pre-History: MacOSXHints and ye olde ‘defaults write’

‘Spray and Pray’ - More of a craft than an art

Just Because You Can... (and even if you think you can’t...)

The Directory Service is inside you!

What is LocalMCX?

Breakdown of all the moving parts

Refresher, Once-Often-Always-Never

Continued, User-Group-Computer-ComputerGroup

The Parental Controls Paradigm

Where the rubber meets the road

Better-than-we-did-yesterday practices™

Bootstrapping

Zero to Sixty

Start with just three steps - download, customize, and deploy

Apple’s unfortunate endorsement message

Package one breakdown

Package two blow-by-blow

Season to taste - Word 2008/2011 default save format example

Take-Home

Where do we go from here?

Recap - Why, What, How

Q&A - Thanks!

Spray & Pray

Less an art than a craft

• /System/Library/User Template

• Apple Remote Desktop

+ Task Server /

Send Unix Command

• etc.

Again, this is not to say I am above the fray, as if I believe what I’m implementing is best practices, instead of just better-than-we-did-yesterday practices. But, to start, there are

places in unix you are not supposed to go, and Apple has designated that the root /System/Library/User Template folder is one of them; that’s why theres that illustrative ‘prohibited’

icon on it. When they ask you nicely not to mess around in there and you do, along comes an OS update that replaces the functionality you wanted and you’re re-doing your work, or

just otherwise violating the terms of the contract. Also it’s not particularly convenient, because you need access to the system before the user logs in and takes that template and

builds their own customization on top of it. And just in general, though, we know we’d rather not have to mess with the global template.

In the Managed Preferences book I’ll be referring to throughout this talk, they admit they are not an Apple-approved guide, but while you may ‘get away’ with certain techniques,

there’s got to be a better way to do things, especially at scale. And a task server or just plain old Apple Remote Desktop and ‘send unix command’, paired with your favorite snippets,

may just be enough of a reliable distribution method for you. ARD alone certainly had been getting me most of the way for a time. Even harder to admit is the amount of times I’m

not breaking Apple’s rules, but breaking my own. And that is when I copy a quote-unquote known-good plist from one of my systems to overwrite the same one on workstations I

manage and just kindof hope I’m not unnecessarily exposing a ﬂeet of machines to risk because of my laziness.

And doing ﬁledrop of plists, as I call that last technique requires a certain amount of guesswork when it comes to timing, because swapping out a certain ﬁle at the wrong time could

lead to application instability, hence the name of this section, “spray and pray”.

I do this with just my local admin account in images still, and I don’t want to sound too harsh, since I know that even revered packaging tools like the luggage has stanzas for

targeting the global template. I’m just trying to get the point across that it’s unfortunate when we make compromises instead of what we know is more warrantee-able and therefore

supportable methods.

剩余32页未读，继续阅读

评论收藏

内容反馈

版权申诉