MarsRed

Hi all, I want to do two things... 1 - Combine multiple packages into one package (i.e. install multiple pieces of software with one installer). Can I do this with PackageMaker? 2 - Add icons to the dock as part of the installer package. (i.e. If I install Word I want the Word icon in the dock after install is complete) Any suggestions on how to go about this? thanks!

I see two ways of going about this... 1) You could block access to flash drives (using Workgroup Manager) in general, but this wouldn't let students back up their files, etc. 2) You could choose the only applications that students are able to run (again using Workgroup Manager) - i.e. only Safari and MS Office. I THINK this would block flash-drive apps from being opened, but I can't be certain since I haven't tried it.

I'm not sure about the AD part, but you should be able to see the local machine when you authenticate locally. Double check that you're selecting the Machines tab (the first two 'tabs' are users and user groups, so maybe you're seeing those?).

If you want to do it without an OS X Server (since you don't have so many Macs), you can modify the local MCX prefs on using Workgroup Manger (locally). You can download Workgroup Manager here: Server Admin Tools 10.6 When prompted to authenticate to Workgroup Manager, use "localhost" as the address and your admin username/password. Then click on the Machines tab (picture of a rectangle, next to a picture of a group of people), click on the local machine, and modify the preferences as you want to.

Thanks! That's a great guide. It talks a lot about machine authentication, but what if I don't want to use machine authentication at all?

Does anyone have any thoughts on setting up this GPO?

With the way it is set up, there is a different SSID for each vlan. The SSID that these laptops should connect to is on a vlan in which the Domain Controller/logon scripts/profiles are accessible. I don't think using machine authentication first would help in this setup - true?

Cool. Much appreciated. Am looking forward to the screenshot.

We're using a Cisco managed system. Yes, what you described is very similar to what I want. The authentication is already set up, I'm more interested in how you used GPO to push out the settings. Do your users authenticate to the wireless network AFTER login (with a cached account, and they don't receive login scripts) or BEFORE login (meaning first to the wireless, then login with scripts – in which case you could log in to an account that is not already cached)? I'm looking to do the latter. Thanks!

It's already an authenticated wireless network (authenticates with RADIUS server / AD credentials). It's not unprotected.

I'm sorry if I was unclear! I want the laptop to "see" the wireless network at the login window, connect to it upon authenticating at login with AD credentials, then log in. (The wireless network uses RADIUS for AD authentication only) For example, in Mac OS X with a Login Window profile, when an AD user enters his/her name and password, it first finds the wireless network and authenticates to it, then authenticates (using that wireless connection) to the DC and logs in to the machine. Does that make sense?

You could try building a package that changes this setting, using something like JAMF Composer Here's how I'd do it with Composer: Take a 'snapshot' of a machine with the current setting, then change the setting and take another snapshot. Create the package (and test it) and deploy it with Remote Desktop. Composer's final package contains the modified and/or added files that it detects between the two snapshots. Whichever files are modified to change your localization setting would be detected and made part of the package.

From what you wrote, it seems you want your Macs to receive preferences at the machine level and authenticate users with existing AD user accounts? I would do this by setting up your OS X Server to receive directory services from your AD Domain Controller (in Server Admin under Open Directory), then bind your machines to the OS X Server. When you bind the machines to the OS X Server, it should create a machine account in Workgroup Manager so that you can manage preferences at the machine level (i.e. your login window message), but also allow users to log in using their existing AD accounts (which actually 'live' on the Domain Controller, but are referenced to on the OS X Server). I haven't actually tried this myself, but I think it should work. Does that seem to fulfill what you want to do?

Hi all, I've done some research and found information on this all over this place, but nothing that quite illustrates how to implement this. I want XP laptops to connect to the wireless network at login using the user's AD credentials. Meaning, I don't want to authenticate as the machine or use a single WPA password (which, it seems, the Wireless Zero Configuration utility lets me do); I want to first authenticate to the network, then login (so that login scripts are run, etc). As a Mac guy, this would be similar to a Login Window Profile. From what I've read, I think this is possible using a Group Policy, but I'm not sure how to implement this. Any thoughts? Thanks!