+ Post New Thread
Results 1 to 11 of 11
Mac Thread, Configuring Workgroup Manager and Google Apps in Technical; 'm having an issue with a permissions error on our managed Macs using Google Drive. I installed GD and added ...
  1. #1

    Join Date
    Apr 2012
    Posts
    57
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Configuring Workgroup Manager and Google Apps

    'm having an issue with a permissions error on our managed Macs using Google Drive. I installed GD and added the permissions for it in Workgroup manager. The issue is the updater program 'ksadmin' gives a permission error. I haven't found a way to allow ksadmin or even to delete it. From what I saw online it says to delete the ksadmin file under ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ however this directory does not exist. I also added this folder to the WGM whitelist but still no change. Any other ideas? The permission error comes up constantly.
    Reply Unsubscribe

  2. #2
    stevehp's Avatar
    Join Date
    Jul 2008
    Location
    Ohio
    Posts
    102
    Thank Post
    13
    Thanked 19 Times in 16 Posts
    Rep Power
    17
    I use these two whitelist entries to allow the updater to run

    ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateAgent
    ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin/

    Watch your usage of WGM it's been to the chopping block for the next OS release. If you wish to update clients or servers to this version you have no choice but to use Local MCX or an MDM solution such as Profile Manager to make the types of settings changes you're doing now in WGM.

  3. #3

    Join Date
    Apr 2012
    Posts
    57
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks Steve. Yep I'm aware that WGM is a dead dinosaur. However, I just started in this position two months ago and unfortunately don't have the time to make a transition to something new. I'll be working this year on getting a server up and moving over to AD. I'm coming from an almost completely PC based environment to a 98% Mac environment here. Is there a way to manually enter the folders into WGM or do I always have to browse for them?

    Also, I'd like to deploy Chrome to all of our machines. Can I install it to all machines from within WGM or do I have to go to each machine?

  4. #4
    stevehp's Avatar
    Join Date
    Jul 2008
    Location
    Ohio
    Posts
    102
    Thank Post
    13
    Thanked 19 Times in 16 Posts
    Rep Power
    17
    No you don't have to browse to them. What you have to do is ensure you are managing Applications by choosing Always and clicking Apply Now. Click done then above the preferences list you'll see two buttons one is called Overview and the other is Details, click on Details. You'll see that any preference you have enabled will have an arrow pointing slightly to the left. Look through your list and find com.apple.applicationaccess.new and double click on it. You'll see three entries called: Once, Often and Always. On Always click on the disclosure triangle to the left of the text to drop it down. The key you need to modify is called pathWhiteList-Raw. Highlight it and you'll see that New Key in the upper left hand portion of the window has been enabled. Click on New Key once to add an entry and one will populate with a 0 the type will be string and the value is empty. You need to type or paste in your path in the value field.

    NOTE: Watch your usage of the delete key as it has a negative affect of deleting your entry instead of the text. So if you need to edit the text you're typing in the value field it's best to use your mouse to highlight the text and overwrite it with your corrections.

    WGM doesn't really have a mechanism for software deployment. If you have a spare OSX powered machine lying around you can use something like Munki. I use it and I highly recommend it. The machine doesn't need to have osx server software on it, but for ease of configuration it might be useful. You will need to do some work in Terminal to get it working and for most administration tasks, but the prompts are mostly easy to understand. If you don't have the spare hardware and have plenty of drive space on your current server then you can use it as well.

    munki - Managed software installation for OS X - Google Project Hosting

    If your client numbers are small then it would probably be easiest to install it manually on each one.

    Another option is to obtain a copy of Apple Remote Desktop. For small installations of servers and clients it will help out a great deal.
    Last edited by stevehp; 28th August 2013 at 06:05 PM.

  5. #5

    Join Date
    Apr 2012
    Posts
    57
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    All our machines have ARD on them. Can I deploy software using that? I couldn't find a software package for Chrome.

  6. #6


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,808
    Thank Post
    262
    Thanked 2,969 Times in 2,183 Posts
    Rep Power
    847
    Quote Originally Posted by Stryker412 View Post
    I couldn't find a software package for Chrome.
    This should help...

    Deploying and Managing Google Chrome: The Rough Guide « Krypted

  7. #7
    stevehp's Avatar
    Join Date
    Jul 2008
    Location
    Ohio
    Posts
    102
    Thank Post
    13
    Thanked 19 Times in 16 Posts
    Rep Power
    17
    All of your machines do? Or are you mistaking the ARD client for the Admin software? The client software is baked into the OS, but the actual Admin software is a 79.99 app on the Mac App store.

    For ARD usage if you download the dmg file from Google then open it you can drag the Google Chrome.app file from that and use that with ARD.

  8. #8

    Join Date
    Apr 2012
    Posts
    57
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Yes sorry, like you said all our machines have the client software. I have the ARD admin software on my machine.

  9. #9

    Join Date
    Apr 2012
    Posts
    57
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by stevehp View Post
    I use these two whitelist entries to allow the updater to run

    ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateAgent
    ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin/

    Watch your usage of WGM it's been to the chopping block for the next OS release. If you wish to update clients or servers to this version you have no choice but to use Local MCX or an MDM solution such as Profile Manager to make the types of settings changes you're doing now in WGM.
    I tested one of our lab machines logged in as a faculty member. I added those two entries to the Lab computers and faculty workgroup, yet I'm still getting the ksadmin error.


    BTW: I was able to deploy Chrome via ARD by creating a Chrome package. I followed the instructions found here: https://groups.google.com/forum/?hl=...se/noFKRCn45-k
    Last edited by Stryker412; 29th August 2013 at 02:55 PM.

  10. #10
    stevehp's Avatar
    Join Date
    Jul 2008
    Location
    Ohio
    Posts
    102
    Thank Post
    13
    Thanked 19 Times in 16 Posts
    Rep Power
    17
    Ensure you also have in your allow list:
    /Library
    /Applications
    /System/Library

    You can also try putting in the root of the user library folder as well, it's ~/Library .

  11. #11

    Join Date
    Apr 2012
    Posts
    57
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    If I add /Applications, won't that give them access to all Applications?



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 22nd February 2012, 09:26 AM
  2. Anyone using both 365 and Google Apps Ed together.
    By edutech4schools in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 2nd February 2012, 01:22 PM
  3. Moodle and Google Apps integration
    By localzuk in forum Virtual Learning Platforms
    Replies: 3
    Last Post: 6th December 2011, 04:37 PM
  4. Internal SMTP Server and Google Apps
    By bmittleider in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 10th March 2011, 07:30 AM
  5. SWGfL and Google Apps
    By hudzen76 in forum South West Grid for Learning (SWGfL)
    Replies: 31
    Last Post: 5th July 2010, 02:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •