Jump to content

How to create an OS X Default Profile/Template & Bind to AD - 10.5 - 10.8


Recommended Posts

  • 2 weeks later...
Posted

Carter, first wanted to thank you for putting the time into this. This is exactly what I am looking for. Much Appreciate! I currently support an organization that is moving from a Windows to OS X environment (Maintaining our AD backend) and we we're doing the same thing with the Default profile albeit for Windows as we plan now to do with OS X. My concern is doing it correctly and I have a few concerns, questions, etc.

1.) We will be using AdmitMac for binding our AD with OS X, should this be installed and setup during the creation of the Default User? I would assume yes?

2.) We will be also using DeepFreeze for Mac, I would assume we install and freeze workstations once we have completed the whole process?

3.) We currently Map (I know, Mount) several shares based on user profile, anything to take in consideration or be aware of on the Mac side of things?

4.) We will be using Jamf Composer and Imaging suite, anything here to take into consideration or be aware of?

5.) Sounds like you install all the software and configure to your taste, then go though the process of creating the default profile, quite similar to Windows creation of default profile.

 

Thanks for your prompt assistance and support.

 

Much appreciated

Andrew

Posted
Carter, first wanted to thank you for putting the time into this. This is exactly what I am looking for. Much Appreciate! I currently support an organization that is moving from a Windows to OS X environment (Maintaining our AD backend) and we we're doing the same thing with the Default profile albeit for Windows as we plan now to do with OS X. My concern is doing it correctly and I have a few concerns, questions, etc.

1.) We will be using AdmitMac for binding our AD with OS X, should this be installed and setup during the creation of the Default User? I would assume yes?

2.) We will be also using DeepFreeze for Mac, I would assume we install and freeze workstations once we have completed the whole process?

3.) We currently Map (I know, Mount) several shares based on user profile, anything to take in consideration or be aware of on the Mac side of things?

4.) We will be using Jamf Composer and Imaging suite, anything here to take into consideration or be aware of?

5.) Sounds like you install all the software and configure to your taste, then go though the process of creating the default profile, quite similar to Windows creation of default profile.

 

Thanks for your prompt assistance and support.

 

Much appreciated

Andrew

 

 

1.) We will be using AdmitMac for binding our AD with OS X, should this be installed and setup during the creation of the Default User? I would assume yes?

The computers should be bound to AD after they have been imaged. This way they get entered into AD with the computer name given to the computer. We use Deploy Studio which does it all for us. After imaging the computer restarts and it automatically binds to AD, OD & then installs the DeepFreeze seed we have created. Install DF after the computer is imaged just makes for a cleaner install.

 

2.) We will be also using DeepFreeze for Mac, I would assume we install and freeze workstations once we have completed the whole process?

Se answer to #1 :-)

 

3.) We currently Map (I know, Mount) several shares based on user profile, anything to take in consideration or be aware of on the Mac side of things?

Mapping can be easy but I find that though the shares mount as a drive it will put the server in the side list in the finder. If the user tries to click on the server they will see more than they should though they will only have access to what they should. I hide "Servers" from the finder window. This way they just see the mounted shares that they are suposed to see.

 

4.) We will be using Jamf Composer and Imaging suite, anything here to take into consideration or be aware of?

We use Deploy Studio and though I played around with Jamf I never just stayed with DS so not really sure what there is now to look at with the product.

5.) Sounds like you install all the software and configure to your taste, then go though the process of creating the default profile, quite similar to Windows creation of default profile.

Yes though sysprep for Windows 7 is a nightmare .... sorry, I mean garbage IMO haha. Worked better in Windows XP though yes it has a few good options for 7. i just created this script as it really just runs a number of commands to clean up the profile and to run tasks for you rather than sitting there and running each task on your own. You can add to the script if there is anything else you would like to to add for the process.

  • Thanks 1
  • 2 weeks later...
Posted

Hi Carter, went though the steps implicitly, at the point of running your script... I get this message " The action "run shell script" encountered an error. Check the actions properties and try running the workflow again.

 

Running 10.7.4. You prompt response would be greatly appreciated as we are sitting here dead in water until we get an answer

 

Thanks again.

Posted
Hi Carter, went though the steps implicitly, at the point of running your script... I get this message " The action "run shell script" encountered an error. Check the actions properties and try running the workflow again.

 

Running 10.7.4. You prompt response would be greatly appreciated as we are sitting here dead in water until we get an answer

 

Thanks again.

 

Open up he AutoMator application then open up the script. When open select the run option. This will run the script but show u where it fails and should be able to figureout from here what might be he issue.

Posted

O.K. create a default user called "defaultuser" the error is cp:/users/default/*: No such file or directory (1)

 

so it looks like the name of our defaultuser is the culprit? can we modify the script? or should we blow up that defaultuser account and create default?

Posted
Where you have Automator open you should see all the commands That run. just change the user "default" to the username u use and save as an application.
Posted

Yep, we got it to work Carter... Magnificient amount of work you saved us.. Cheers to you! :wave:

 

Question, where did you get those wallpaper images on your youtube demos? The Racer, the Robot, the Frog and the broken down carscape sceen? Is it possible to get?

 

Thanks again for your help!

Posted
Yep, we got it to work Carter... Magnificient amount of work you saved us.. Cheers to you! :wave:

 

it works...thanks for the template and it really help us.

 

Great to hear!! :cool:

 

Question, where did you get those wallpaper images on your youtube demos? The Racer, the Robot, the Frog and the broken down carscape sceen? Is it possible to get?

 

Thanks again for your help!

 

I've collected a large Wallpaper gallery over the years so not sure where I've got most of them but two sites I use are interfacelift wallpapers, icons, themes, and iOS apps & The Paper Wall

 

Here are the ones you asked about Carter's Wallpapers - Imgur

 

:cool:

  • 2 weeks later...
  • 3 weeks later...
Posted
Hi Carter,

I got this to work, however....

 

When an LDAP user logins into the computer they get prompted with "The System was Unable to unlock your Keychain" .....any ideas?

 

I have gone into the "default" user and deleted the Keychain, restarted and ran your script again. The keychain error is still present.

 

thanks for any help

 

Hi Carter,

 

I'm getting the same error here. When logging in with an AD user, I get the "the system was unable to unlock your login keychain". So I have to Create a new Keychain.

 

Any ideas?

Posted
I don't have permission to edit the post with the links so I've reported it to see if a MOD can change them for me. Hope to have the update links there soon.
  • 2 weeks later...
Posted
Had same problem, runned all line of the script by copying them from automator to terminal window, worked but did not do what i thought it should 1st im running osx 10.7.2 and /User/default doesn't exist, so i assumed "default" refer to the username under which you did the configuration of the workspace, 2nd instead of cleaning the folder under English.lproj wouldn't you be better running a cleaner before login off (like onyx) 3rd for those that are not using the mac with an English interface you can change the English.lproj to French.lproj or whatever is your language assuming you refer to the folder User Template to name it. Thanks for this doc though it helped me understand the default profile
  • 2 weeks later...
Posted
Is there an easy way to accomplish the same thing on Mountain Lion?

 

I have not managed to get the script to work in ML. So in the interim,

1. I created a admin user called "profile" set everything up in that account the way I want...

2. I ran onyx to clear all the recent items and other cruft that accumulates during this process

3.Then I login to root user (I have had troubles doing this under a normal admin account), enable hidden folders by entering the following command in the terminal:

defaults write com.apple.Finder AppleShowAllFiles YES; killall -HUP Finder



(the users library folder is hidden)

4. Go to the Root Level of HD-> Users/profile (or whatever you called the default template user) and open the users library folder.

5. From the library folder, copy the Preferences folder and the Safari folder (if you configured Safari Bookmarks etc).

6. Browse to System-> Library -> User Template and option+drag the english.lproj folder to the desktop or another backup location. Call the something like english.lproj_orig, (incase you need to start again)

7. Paste the folders copied over from the default user in step 5 into the english.lproj folder in the user template folder.

8. Run Repair disk permissions in disk utility to clear up any "ownership issues"

 

Your new users should now be based on this template, but its good to test before deployment just incase, sometimes this doesnt work for some reason.

Sorry if this seems like a bit of a long winded process but its the only one I have got to work on a consistent basis...

Hope this helps :)

Posted

Works fine with OS X 10.8.2 Mountain Lion using the same "OS X Lion 10.7" script.

 

What errors are you getting? The best thing is to open the script in Automator then run it within the program and it will show you step by step the actions then show you where it has an issue.

 

I've tested this with the latest version of OS X 10.8.2 and logged into the computer using a new AD user and gives me the same profile as the "default" user.

 

.

  • 4 months later...
Posted
Works fine with OS X 10.8.2 Mountain Lion using the same "OS X Lion 10.7" script.

 

What errors are you getting? The best thing is to open the script in Automator then run it within the program and it will show you step by step the actions then show you where it has an issue.

 

I've tested this with the latest version of OS X 10.8.2 and logged into the computer using a new AD user and gives me the same profile as the "default" user.

 

.

 

Hi I have mountain Lion 10.8.2 and the Lion Script doesnt work. Im getting in Automator. SUDO: no tty present and no askpass program specified. This is on a fresh install and all updates applied.

 

Whats tty have you got any ideas?

Posted
Hi I have mountain Lion 10.8.2 and the Lion Script doesnt work. Im getting in Automator. SUDO: no tty present and no askpass program specified. This is on a fresh install and all updates applied.

 

Whats tty have you got any ideas?

 

I use this script under the "root" user. If you are not using root user this will not run. "root" user should rarely be used but because there are a a number of commands in this script that use sudo I used the root user so there is no prompting. Also make sure the user you are using is called "default"

 

** Next year I plan to change this to "administrator"

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...