TweetFollow Us on Twitter

Managed Preferences, Part 2

Volume Number: 24 (2008)
Issue Number: 02
Column Tag: Operating Systems

Managed Preferences, Part 2

New options in Workgroup Manager in Leopard

By Philip Rinehart, Yale University

Managed Preferences

A couple of months ago, I talked a little about all of the new command line options for troubleshooting Managed Preferences. In short, many new options are available for the system administrator. Well, even more love was given to the Preference Manifest Editor. New to Tiger, any preference could be managed in theory, as long as the manifest existed in the application. In Leopard, Apple engineers added some new abilities, many of which are quite powerful.

Getting started

To get started is pretty simple. It is explained in the Leopard server guide. However, I had to play with it a little bit to really understand it fully. Another useful tip, Leopard Server is not needed to play with the manifests. How, you ask? It is actually pretty easy. First, download a copy of the Leopard Server tools from the Apple download website. Install them, and launch Workgroup Manager. Now, instead of actually authenticating against a server, click Cancel. Next, click View Directories from the Server menu.


Figure 1

A window similar to Figure 1 should appear. Note that the Local Directory is being viewed, here not an Open Directory server. Click the Lock to authenticate, and enter an administrator account on the machine. For my testing, I created a testmcx user. This user will also appear in the System Preferences Accounts panel; the account appears as a managed account. So far, not so different from Tiger, right? Select a user, and click on Preferences. Nothing is managed initially, as expected. Click on the Details button. Nothing appears in the window. Now, here's where it begins to get interesting. Click the Plus button. The dialog box asks for a location. Use the Command-G option to navigate to the /System/Library/CoreServices directory. Next choose the ManagedClient application. Whoah, look at all of the applications that can now be managed! Your WGM screen should be similar to Figure 2:


Figure 2

Pretty interesting, eh? Many of these preferences cannot be managed via the standard Preferences interface. The next question is how do you actually manage these preferences? Let's look at two of them.

Folder Redirection

As noted on AFP548.com, a very interesting option is the use of Folder Redirection. Let's get started. First select the Folder Redirection option, and click the Edit icon. At first the Dictionary will appear to be empty. There's a bit of a trick to actually get it to work. Choose Always, and click the disclosure triangle so that it points downward. Next, click New Key. Still doesn't look very interesting does it? How do you pick the right key? Here's where the magic is, click on the new item.


Figure 3

Voila! There are now multiple ways to redirect, login, logout as shown in Figure 3. Select any one of them, and it will create an array of keys that are pre-populated. Keep clicking New Key if the key is not a string, but instead an array or dictionary. Try it out; it's pretty self-explanatory once you understand the little trick to get it working. Another tip, in the window at the bottom of the Workgroup Manager screen, a full explanation of how the key is used is given. Pay attention to it, as it is written fairly clearly.


Figure 4

Figure 4 shows how a fully populated Redirection key will look. The default option is to delete the folder in the local home directory and put in a symbolic link to the redirected folder. One other note, how does the redirector know the user? For all of these managed preferences, the %@ is used as a replacement for the currently logging in user. From a scriptwriter's perspective, this substitution is slightly different as script writers have gotten used to using the $1 substitution. One other note: this key can be managed as Once, Often or Always. Not all keys can be managed this way. Let's look at one that can only be managed as Always.

Bluetooth

Bluetooth commonly needs to managed in more secure environments. In particular, the ability to even turn on Bluetooth may need to be disallowed. In this case, try adding the key as Often or Once. Note that there are no options available. The Bluetooth managed preference key can only be managed Always. It makes sense if you think about it, as from a security standpoint a system administrator would always want it be off. If you use the Always key, an option to Disable Bluetooth appears. In my book, this ability is long overdue!

Other keys can be managed, including iWork and QuickTime registrations, as well as a more extensive number of keys for mobile computing. A couple of keys have solved nagging problems right away in my work, including the ability to control the Safari downloads location, turning off Autofill for Safari, and Open Safe Downloads, all things that can make more sense to manage from a server.

One last thing, since this article talks about how to use the local directory for management, these modifications could be used as part of an image distribution mechanism, and not require Leopard Server. However, management in this way really isn't scalable, but might work for a test deployment to explore the new options available for system administration.

Well, that's about it for this month. I encourage you to explore the new options available, and if options are missing that you would like to manage, make sure to submit a Feature Request. Only through feature request submissions will more options be added! Until next month, I'll see you on the lists!


Philip Rinehart is co-chair of the steering committee leading the Mac OS X Enterprise Project (macenterprise.org) and is the Lead Mac Analyst at Yale University. He has been using Macintosh Computers since the days of the Macintosh SE, and Mac OS X since its Developer Preview Release. Before coming to Yale, he worked as a Unix system administrator for a dot-com company. He can be reached at: philip.rinehart@yale.edu.

The MacEnterprise project is a community of IT professionals sharing information and solutions to support Macs in an enterprise. We collaborate on the deployment, management, and integration of Mac OS X client and server computers into multi-platform computing environments.
 
AAPL
$517.96
Apple Inc.
-3.72
MSFT
$39.75
Microsoft Corpora
+0.57
GOOG
$536.44
Google Inc.
+3.92

MacTech Search:
Community Search:

Software Updates via MacUpdate

Starcraft II: Wings of Liberty 1.1.1.180...
Download the patch by launching the Starcraft II game and downloading it through the Battle.net connection within the app. Starcraft II: Wings of Liberty is a strategy game played in real-time. You... Read more
Sibelius 7.5.0 - Music notation solution...
Sibelius is the world's best-selling music notation software for Mac. It is as intuitive to use as a pen, yet so powerful that it does most things in less than the blink of an eye. The demo includes... Read more
Typinator 5.9 - Speedy and reliable text...
Typinator turbo-charges your typing productivity. Type a little. Typinator does the rest. We've all faced projects that require repetitive typing tasks. With Typinator, you can store commonly used... Read more
MYStuff Pro 2.0.16 - Create inventories...
MYStuff Pro is the most flexible way to create detail-rich inventories for your home or small business. Add items to MYStuff by dragging and dropping existing information, uploading new images, or... Read more
TurboTax 2013.r17.002 - Manage your 2013...
TurboTax guides you through your tax return step by step, does all the calculations, and checks your return for errors and overlooked deductions. It lets you file your return electronically to get... Read more
TrailRunner 3.8.769 - Route planning for...
Note: While the software is classified as freeware, it is actually donationware. Please consider making a donation to help support development. TrailRunner is the perfect companion for runners,... Read more
Flavours 1.1.10 - Create and apply theme...
Flavours is a Mac application that allow users to create, apply and share beautifully designed themes. Classy Give your Mac a gorgeous new look by applying delicious themes! Easy Unleash your... Read more
Spotify 0.9.8.296. - Stream music, creat...
Spotify is a streaming music service that gives you on-demand access to millions of songs. Whether you like driving rock, silky R&B, or grandiose classical music, Spotify's massive catalogue... Read more
SlingPlayer Plugin 3.3.20.475 - Browser...
SlingPlayer is the screen interface software that works hand-in-hand with the hardware inside the Slingbox to make your TV viewing experience just like that at home. It features an array of... Read more
S.M.A.R.T. for USB and FireWire Drives 0...
S.M.A.R.T. for USB and FireWire Drives is a kernel driver for OS X external usb or firewire drives. It extends the standard driver behaviour by providing access to drive smart data. The interface to... Read more

Latest Forum Discussions

See All

148Apps Live on Twitch: Pivvot’s Looper...
On our latest Twitch stream, we’ll be playing a pair of minimalist arcade games, one that just got a big content update in Pivvot, and another that was inspired by it in 15 Coins. Whitaker Trebella, creator of Pivvot, will discuss the new modes... | Read more »
Word Cubes Review
Word Cubes Review By Jordan Minor on April 15th, 2014 Our Rating: :: SQUARESVILLEUniversal App - Designed for iPhone and iPad Word Cubes is fine, but it is barely any different from any other word game.   | Read more »
PAX East 2014 – Desert Fox: The Battle o...
PAX East 2014 – Desert Fox: The Battle of El Alamein is Coming to iOS Soon Posted by Rob Rich on April 15th, 2014 [ permalink ] Shenandoah Studio has become one of the go-to developers for war games on iOS, with | Read more »
Tank of Tanks Review
Tank of Tanks Review By Carter Dotson on April 15th, 2014 Our Rating: :: TANKS A LOT!iPad Only App - Designed for the iPad This multiplayer game played on a single iPad is simple, chaotic fun.   | Read more »
PAX East 2014 – Dungeon of the Endless J...
PAX East 2014 – Dungeon of the Endless Just Might Have a Shot at an iPad Release Posted by Rob Rich on April 15th, 2014 [ permalink ] I think it’s fair to say that | Read more »
SideSwype Review
SideSwype Review By Carter Dotson on April 15th, 2014 Our Rating: :: ON YOUR SIDEUniversal App - Designed for iPhone and iPad SideSwype is a puzzler that takes inspiration from Threes, but becomes its own incredibly fun game.   | Read more »
PAX East 2014 – Bigfoot Hunter Invites P...
PAX East 2014 – Bigfoot Hunter Invites Players on a Wild and Wooly Photo Safari Posted by Rob Rich on April 15th, 2014 [ permalink ] Yeti. Sasquatch. Wendigo. | Read more »
Dungeon Quest Review
Dungeon Quest Review By Cata Modorcea on April 15th, 2014 Our Rating: :: NO STORY, BUT GOOD FUNUniversal App - Designed for iPhone and iPad Dungeon Quest does a lot of things right, but ultimately forgets about one of the core... | Read more »
Tempo AI and Speek Join Forces to “Kill...
Tempo AI and Speek Join Forces to “Kill the Conference Call PIN” Posted by Rob Rich on April 15th, 2014 [ permalink ] Today Tempo AI, makers of Tempo Smart Calendar, and | Read more »
Fighting Fantasy: Starship Traveller Rev...
Fighting Fantasy: Starship Traveller Review By Jennifer Allen on April 15th, 2014 Our Rating: :: A SIGNIFICANT VOYAGEUniversal App - Designed for iPhone and iPad Continuing the release of Fighting Fantasy titles, Starship Traveller... | Read more »

Price Scanner via MacPrices.net

Save $50 on Mac mini Server
B&H Photo has the 2012 Mac mini Server on sale for $949 including free shipping plus NY sales tax only. Their price is $50 off MSRP. Read more
PhatWare’s “Ultimate Writing App For iOS” Ren...
PhatWare Corp. has announced it has renamed its new WritePro word processing app for iPhone and iPad: WritePad Pro. The decision to change the app’s name to leverages the strong brand awareness and... Read more
Full Resolution Photo Editor Tint Mint 1.0 Re...
California based independent developer, Jeffrey Sun, creator of the iOS app Modern Editor, has released Tint Mint, a new photography app for editing enthusiasts. The app costs a dollar, and it packs... Read more
16GB iPad mini (Apple refurbished) available...
The Apple Store has refurbished 1st generation 16GB iPad minis available for $249 including free shipping. Both black and white models are available. Read more
Save $120 on the 27-inch 3.2GHz Haswell iMac
B&H Photo has the 27″ 3.2GHz iMac on sale for $1679.99 including free shipping plus NY sales tax only. Their price is about $120 off MSRP. Read more
Using a Mac Doesn’t Eliminate The Heartbleed...
Low End Mac’s Dan Knight notes that any time you visit a website with an https: prefix or see that secure lock icon on your browser, some type of security software is busy trying to protect your data... Read more
AirPrint Basics Tutorial Posted
A new Apple Knowledge Base article helps get you started using AirPrint, the Apple protocol that enables instant printing from iPad, iPhone, iPod touch, and Mac without the need to install drivers or... Read more
Speed Tips For Running LibreOffice On The Mac
LibreOffice is my favorite of several free, open-source application suites, and the one I have configured on my Mac as my default app for Word documents that one frequently has to deal with. It also... Read more
Snag a 15-inch Retina MacBook Pro for $115 of...
B&H Photo has 2013 15″ Retina MacBook Pros on sale for up to $115 off MSRP for a limited time. Shipping is free, and B&H charges NY sales tax only: - 15″ 2.3GHz Retina MacBook Pro: $2489.99... Read more
MacBook Airs on sale for $50 to $100 off MSRP
Several resellers are offering $50-$100 discounts on 11″ and 13″ MacBook Airs today, including Amazon, Best Buy, B&H, and others. See the breakdown of deals on our MacBook Air Price Tracker,... Read more

Jobs Board

Position Opening at *Apple* - Apple (United...
**Job Summary** Every day, business customers come to the Apple Store to discover what powerful, easy-to-use Apple products can do for them. As a Business Leader, Read more
Position Opening at *Apple* - Apple (United...
…challenges of developing individuals, building teams, and affecting growth across Apple Stores. You demonstrate successful leadership ability - focusing on excellence Read more
Position Opening at *Apple* - Apple (United...
…Summary** As a Specialist, you help create the energy and excitement around Apple products, providing the right solutions and getting products into customers' hands. You Read more
Position Opening at *Apple* - Apple (United...
**Job Summary** The Apple Store is a retail environment like no other - uniquely focused on delivering amazing customer experiences. As an Expert, you introduce people Read more
Position Opening at *Apple* - Apple (United...
**Job Summary** Being a Business Manager at an Apple Store means you're the catalyst for businesses to discover and leverage the power, ease, and flexibility of Apple Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.