TweetFollow Us on Twitter

Managed Preferences, Part 2

Volume Number: 24 (2008)
Issue Number: 02
Column Tag: Operating Systems

Managed Preferences, Part 2

New options in Workgroup Manager in Leopard

By Philip Rinehart, Yale University

Managed Preferences

A couple of months ago, I talked a little about all of the new command line options for troubleshooting Managed Preferences. In short, many new options are available for the system administrator. Well, even more love was given to the Preference Manifest Editor. New to Tiger, any preference could be managed in theory, as long as the manifest existed in the application. In Leopard, Apple engineers added some new abilities, many of which are quite powerful.

Getting started

To get started is pretty simple. It is explained in the Leopard server guide. However, I had to play with it a little bit to really understand it fully. Another useful tip, Leopard Server is not needed to play with the manifests. How, you ask? It is actually pretty easy. First, download a copy of the Leopard Server tools from the Apple download website. Install them, and launch Workgroup Manager. Now, instead of actually authenticating against a server, click Cancel. Next, click View Directories from the Server menu.


Figure 1

A window similar to Figure 1 should appear. Note that the Local Directory is being viewed, here not an Open Directory server. Click the Lock to authenticate, and enter an administrator account on the machine. For my testing, I created a testmcx user. This user will also appear in the System Preferences Accounts panel; the account appears as a managed account. So far, not so different from Tiger, right? Select a user, and click on Preferences. Nothing is managed initially, as expected. Click on the Details button. Nothing appears in the window. Now, here's where it begins to get interesting. Click the Plus button. The dialog box asks for a location. Use the Command-G option to navigate to the /System/Library/CoreServices directory. Next choose the ManagedClient application. Whoah, look at all of the applications that can now be managed! Your WGM screen should be similar to Figure 2:


Figure 2

Pretty interesting, eh? Many of these preferences cannot be managed via the standard Preferences interface. The next question is how do you actually manage these preferences? Let's look at two of them.

Folder Redirection

As noted on AFP548.com, a very interesting option is the use of Folder Redirection. Let's get started. First select the Folder Redirection option, and click the Edit icon. At first the Dictionary will appear to be empty. There's a bit of a trick to actually get it to work. Choose Always, and click the disclosure triangle so that it points downward. Next, click New Key. Still doesn't look very interesting does it? How do you pick the right key? Here's where the magic is, click on the new item.


Figure 3

Voila! There are now multiple ways to redirect, login, logout as shown in Figure 3. Select any one of them, and it will create an array of keys that are pre-populated. Keep clicking New Key if the key is not a string, but instead an array or dictionary. Try it out; it's pretty self-explanatory once you understand the little trick to get it working. Another tip, in the window at the bottom of the Workgroup Manager screen, a full explanation of how the key is used is given. Pay attention to it, as it is written fairly clearly.


Figure 4

Figure 4 shows how a fully populated Redirection key will look. The default option is to delete the folder in the local home directory and put in a symbolic link to the redirected folder. One other note, how does the redirector know the user? For all of these managed preferences, the %@ is used as a replacement for the currently logging in user. From a scriptwriter's perspective, this substitution is slightly different as script writers have gotten used to using the $1 substitution. One other note: this key can be managed as Once, Often or Always. Not all keys can be managed this way. Let's look at one that can only be managed as Always.

Bluetooth

Bluetooth commonly needs to managed in more secure environments. In particular, the ability to even turn on Bluetooth may need to be disallowed. In this case, try adding the key as Often or Once. Note that there are no options available. The Bluetooth managed preference key can only be managed Always. It makes sense if you think about it, as from a security standpoint a system administrator would always want it be off. If you use the Always key, an option to Disable Bluetooth appears. In my book, this ability is long overdue!

Other keys can be managed, including iWork and QuickTime registrations, as well as a more extensive number of keys for mobile computing. A couple of keys have solved nagging problems right away in my work, including the ability to control the Safari downloads location, turning off Autofill for Safari, and Open Safe Downloads, all things that can make more sense to manage from a server.

One last thing, since this article talks about how to use the local directory for management, these modifications could be used as part of an image distribution mechanism, and not require Leopard Server. However, management in this way really isn't scalable, but might work for a test deployment to explore the new options available for system administration.

Well, that's about it for this month. I encourage you to explore the new options available, and if options are missing that you would like to manage, make sure to submit a Feature Request. Only through feature request submissions will more options be added! Until next month, I'll see you on the lists!


Philip Rinehart is co-chair of the steering committee leading the Mac OS X Enterprise Project (macenterprise.org) and is the Lead Mac Analyst at Yale University. He has been using Macintosh Computers since the days of the Macintosh SE, and Mac OS X since its Developer Preview Release. Before coming to Yale, he worked as a Unix system administrator for a dot-com company. He can be reached at: philip.rinehart@yale.edu.

The MacEnterprise project is a community of IT professionals sharing information and solutions to support Macs in an enterprise. We collaborate on the deployment, management, and integration of Mac OS X client and server computers into multi-platform computing environments.
 

Community Search:
MacTech Search:

Software Updates via MacUpdate

BetterTouchTool 1.989 - Customize Multi-...
BetterTouchTool adds many new, fully customizable gestures to the Magic Mouse, Multi-Touch MacBook trackpad, and Magic Trackpad. These gestures are customizable: Magic Mouse: Pinch in / out (zoom... Read more
calibre 2.77.0 - Complete e-book library...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital librarian... Read more
Quicksilver 1.5.2 - Application launcher...
Quicksilver is a light, fast and free Mac application that gives you the power to control your Mac with keystrokes alone. Quicksilver allows you to find what you need quickly and easily, then act... Read more
Paperless 2.3.9 - $49.95
Paperless is a digital documents manager. Remember when everyone talked about how we would soon be a paperless society? Now it seems like we use paper more than ever. Let's face it - we need and we... Read more
Apple GarageBand 10.1.5 - Complete recor...
The new GarageBand is a whole music creation studio right inside your Mac -- complete with keyboard, synths, orchestral and percussion instruments, presets for guitar and voice, an entirely... Read more
Adobe Audition CC 2017 10.0.2 - Professi...
Audition CC 2017 is available as part of Adobe Creative Cloud for as little as $19.99/month (or $9.99/month if you're a previous Audition customer). Adobe Audition CC 2017 empowers you to create and... Read more
Adobe After Effects CC 2017 14.1 - Creat...
After Effects CC 2017 is available as part of Adobe Creative Cloud for as little as $19.99/month (or $9.99/month if you're a previous After Effects customer). The new, more connected After Effects CC... Read more
Adobe Premiere Pro CC 2017 11.0.2 - Digi...
Premiere Pro CC 2017 is available as part of Adobe Creative Cloud for as little as $19.99/month (or $9.99/month if you're a previous Premiere Pro customer). Adobe Premiere Pro CC 2017 lets you edit... Read more
WALTR 2 2.0.9 - $39.95
WALTR 2 helps you wirelessly drag-and-drop any music, ringtones, videos, PDF, and ePub files onto your iPhone, iPad, or iPod without iTunes. It is the second major version of Softorino's critically-... Read more
Yummy FTP Pro 1.11.14 - $14.99 (50% off)
Yummy FTP Pro is an advanced Mac file transfer app which provides a full-featured professional toolkit combined with blazing speeds and impeccable reliability, so whether you want to transfer a few... Read more

Super Mario Run dashes onto Android in M...
Super Mario Run was one of the biggest mobile launches in 2016 before it was met with a lukewarm response by many. While the game itself plays a treat, it's pretty hard to swallow the steep price for the full game. With that said, Android users... | Read more »
WarFriends Beginner's Guide: How to...
Chillingo's new game, WarFriends, is finally available world wide, and so far it's a refreshing change from common mobile game trends. The game's a mix of tower defense, third person shooter, and collectible card game. There's a lot to unpack here... | Read more »
Super Gridland (Entertainment)
Super Gridland 1.0 Device: iOS Universal Category: Entertainment Price: $1.99, Version: 1.0 (iTunes) Description: Match. Build. Survive. "exquisitely tuned" - Rock Paper Shotgun No in-app purches, and no ads! | Read more »
Red's Kingdom (Games)
Red's Kingdom 1.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0 (iTunes) Description: Mad King Mac has kidnapped your father and stolen your golden nut! Solve puzzles and battle goons as you explore and battle your... | Read more »
Turbo League Guide: How to tame the cont...
| Read more »
Fire Emblem: Heroes coming to Google Pla...
Nintendo gave us our first look at Fire Emblem: Heroes, the upcoming mobile Fire Emblem game the company hinted at last year. Revealed at the Fire Emblem Direct event held today, the game will condense the series' tactical RPG combat into bite-... | Read more »
ReSlice (Music)
ReSlice 1.0 Device: iOS Universal Category: Music Price: $9.99, Version: 1.0 (iTunes) Description: Audio Slice Machine Slice your audio samples with ReSlice and create flexible musical atoms which can be triggered by MIDI notes or... | Read more »
Stickman Surfer rides in with the tide t...
Stickson is back and this time he's taken up yet another extreme sport - surfing. Stickman Surfer is out this Thursday on both iOS and Android, so if you've been following the other Stickman adventures, you might be interested in picking this one... | Read more »
Z-Exemplar (Games)
Z-Exemplar 1.4 Device: iOS Universal Category: Games Price: $3.99, Version: 1.4 (iTunes) Description: | Read more »
5 dastardly difficult roguelikes like th...
Edmund McMillen's popular roguelike creation The Binding of Isaac: Rebirth has finally crawled onto mobile devices. It's a grotesque dual-stick shooter that tosses you into an endless, procedurally generated basement as you, the pitiable Isaac,... | Read more »

Price Scanner via MacPrices.net

Apple Ranked ‘Most Intimate Brand’
The top ranked ‘”intimate” brands continued to outperform the S&P and Fortune 500 indices in revenue and profit over the past 10 years, according to MBLM’s Brand Intimacy 2017 Report, the largest... Read more
B-Eng introduces SSD Health Check for Mac OS
Fehraltorf, Switzerland based independant Swiss company- B-Eng has announced the release and immediate availability of SSD Health Check 1.0, the company’s new hard drive utility for Mac OS X. As the... Read more
Apple’s Education discount saves up to $300 o...
Purchase a new Mac or iPad using Apple’s Education Store and take up to $300 off MSRP. All teachers, students, and staff of any educational institution qualify for the discount. Shipping is free: -... Read more
4-core 3.7GHz Mac Pro on sale for $2290, save...
Guitar Center has the 3.7GHz 4-core Mac Pro (MD253LL/A) on sale for $2289.97 including free shipping or free local store pickup (if available). Their price is a $710 savings over standard MSRP for... Read more
128GB Apple iPad Air 2, refurbished, availabl...
Apple has Certified Refurbished 128GB iPad Air 2s WiFis available for $419 including free shipping. That’s an $80 savings over standard MSRP for this model. A standard Apple one-year warranty is... Read more
13-inch 2.7GHz Retina MacBook Pro on sale for...
B&H Photo has the 2015 13″ 2.7GHz/128GB Retina Apple MacBook Pro on sale for $100 off MSRP. Shipping is free, and B&H charges NY tax only: - 13″ 2.7GHz/128GB Retina MacBook Pro (MF839LL/A): $... Read more
Laptop Market – Flight To Quality? – The ‘Boo...
Preliminary quarterly PC shipments data released by Gartner Inc. last week reveal an interesting disparity between sales performance of major name PC vendors as opposed to that of less well-known... Read more
IBM and Bell Transform Canadian Enterprise Mo...
IBM and Bell Canada have announced they are joining forces to offer IBM MobileFirst for iOS market-ready enterprise applications for iPad, iPhone or Apple Watch. Bell, Canada’s largest communications... Read more
Otter Products is Closing… For a Day of Givin...
On Thursday, Feb. 9, Otter Products is closing doors to open hearts. In partnership with the OtterCares Foundation, the company is pausing operations for a day so all employees can volunteer with... Read more
15-inch 2.2GHz Retina MacBook Pro on sale for...
Amazon has 2015 15″ 2.2GHz Retina MacBook Pros (MJLQ2LL/A) available for $1799.99 including free shipping. Apple charges $1999 for this model, so Amazon’s price is represents a $200 savings. Read more

Jobs Board

*Apple* & PC Desktop Support Technician...
Apple & PC Desktop Support Technician job in Los Angeles, CA Introduction: We have immediate job openings for several Desktop Support Technicians with one of our Read more
*Apple* Retail - Multiple Positions - Apple,...
SalesSpecialist - Retail Customer Service and SalesTransform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Retail - Multiple Positions (Multi-L...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* Retail - Multiple Positions - Apple,...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* & PC Desktop Support Technician...
Apple & PC Desktop Support Technician job in Stamford, CT We have immediate job openings for several Desktop Support Technicians with one of our most well-known Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.