stevehp

All of your machines do? Or are you mistaking the ARD client for the Admin software? The client software is baked into the OS, but the actual Admin software is a 79.99 app on the Mac App store. For ARD usage if you download the dmg file from Google then open it you can drag the Google Chrome.app file from that and use that with ARD.

The database is in ~/Library/Containers/com.apple.configurator . It will be quite large depending on the number of apps you have imported and other data as well. Mine for instance is nearly 18gb and we have a catalog of about 350ish apps.

No you don't have to browse to them. What you have to do is ensure you are managing Applications by choosing Always and clicking Apply Now. Click done then above the preferences list you'll see two buttons one is called Overview and the other is Details, click on Details. You'll see that any preference you have enabled will have an arrow pointing slightly to the left. Look through your list and find com.apple.applicationaccess.new and double click on it. You'll see three entries called: Once, Often and Always. On Always click on the disclosure triangle to the left of the text to drop it down. The key you need to modify is called pathWhiteList-Raw. Highlight it and you'll see that New Key in the upper left hand portion of the window has been enabled. Click on New Key once to add an entry and one will populate with a 0 the type will be string and the value is empty. You need to type or paste in your path in the value field. NOTE: Watch your usage of the delete key as it has a negative affect of deleting your entry instead of the text. So if you need to edit the text you're typing in the value field it's best to use your mouse to highlight the text and overwrite it with your corrections. WGM doesn't really have a mechanism for software deployment. If you have a spare OSX powered machine lying around you can use something like Munki. I use it and I highly recommend it. The machine doesn't need to have osx server software on it, but for ease of configuration it might be useful. You will need to do some work in Terminal to get it working and for most administration tasks, but the prompts are mostly easy to understand. If you don't have the spare hardware and have plenty of drive space on your current server then you can use it as well. munki - Managed software installation for OS X - Google Project Hosting If your client numbers are small then it would probably be easiest to install it manually on each one. Another option is to obtain a copy of Apple Remote Desktop. For small installations of servers and clients it will help out a great deal.

I use these two whitelist entries to allow the updater to run ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/GoogleSoftwareUpdateAgent ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/MacOS/ksadmin/ Watch your usage of WGM it's been to the chopping block for the next OS release. If you wish to update clients or servers to this version you have no choice but to use Local MCX or an MDM solution such as Profile Manager to make the types of settings changes you're doing now in WGM.

Did you re-download the spreadsheet again after redeeming the codes with Meraki? That would flag the codes used in the spreadsheet so that when you would import the file into Configurator it would import the codes but not use the already redeemed codes. If you were to add additional staff devices to your Meraki MDM it would also need to be made aware of the codes redeemed by Configurator. In order to remove the codes completely you would pretty much have to dump the database which means all of the devices you supervised would be deleted and essentially need to be restored back to factory to remove the now invalid Supervision Profile.

If you have an FQDN available then I would use that. Using the private or internal .local suffix has the potential to cause problems since Apple's Bonjour protocol uses .local. It's more of a recommendation than a requirement. The only real requirement is that the server and the ipads need be able to reach Apple's 17.x.x.x network for push services and a push cert be created. This Apple pdf will help. Flip to page 21 for the network setup portion.

Profile Manager actually is an MDM although as the others have said, it's not a very powerful one. I have experience with it so I'll answer questions as best as I can. Q: Can I remotely manage apps? A: Yes, but in order to deploy apps the iPad itself will need to be logged into a valid Apple ID that was used to purchase or redeem the VPP code for the app. This is true for any MDM, it's the pitfalls of using a device built to work in a consumer i.e. home environment. You can most definitely push out apps based on groups, but I find profile manager more difficult to work with in regards to fine tuning those sort of things. I think JAMF's Casper Suite for iOS or Meraki might be more your speed. In Profile Manager apps must be uploaded to the server first in order to be added. Casper and Meraki can search the store and link apps to profiles without actually storing them on a local server. Apple Configurator can be used to supplement this provided your environment isn't a 1:1 where iPads float around the school without any sort of home base like a cart. Configurator can sync free apps or paid apps (with vpp codes) and enroll a device in one fell swoop if configured correctly. Of course you will need to organize the iPads in your groups so they get one set of apps and not another. It is a great tool once you're familiar with it. Q: Can you set Wall Paper with Profile Manager? A: No, that's not a feature in any MDM as far as I'm aware. We set this in Configurator so that the lock screen is set by the application and our iPad "image" has a background set. Of course we deploy iPads in a 1:1 environment so those don't stick very long. Q: Do I have to enroll each device individually or can I do it a faster way? A: Yep, you sure can. It's called Apple Configurator. For Profile Manager you download a trust profile and an enrollment profile add those to Configurator create a master iPad "image" and provision the rest of your iPads with this "image". I'm using image in quotations because you technically aren't imaging an iPad, you're provisioning it. The links provided above for Charles Edge's website krypted.com are a good starting point to get this going. This pdf file also explains how to create the iPad "image" to auto enroll iPads. You can substitute the Casper enrollment profiles for Profile Manager enrollment profiles and it will still function. 10.8 Profile Manager is leaps and bounds better than 10.7 Profile Manager which causes me great pain anytime I have to deal with it. That being said JAMF's Casper Suite is more solid for large iOS or OSX deployments. Considerably more expensive though.

Chromium ignores the Master Preferences file placed in /Library/Google . I had the same issue in that I couldn't get those policies to set at first run. MCX of course took over once it was run once. It's the only downside, but it beats the heck out of having ksadmin or ksfetch annoying me or my students every other minute. Issue 106686 - chromium - master_preferences file settings doesnt gets reflected on the application - An open-source browser project to help move the web forward. - Google Project Hosting

I had to switch to Chromium for our 1:1 deployment. During testing Chrome would popup endless errors complaining about ksadmin, ksfetch, etc... I had opened up just about everything Google I could find yet it still nagged me. Chromium honors our managed mcx prefs, and has the same look and feel as Chrome so I don't anticipate any issues.

So two for Spiceworks. Will it allow us to barcode items like projectors, laptops, and consumables then check them in and out to staff? I haven't used Spiceworks in quite awhile and it was in limited use as the box I installed it on was quite slow.

Our department is looking for an inventory system that would allow us to check in and out some of our various equipment and also scan our network for devices. I've looked at several of the websites in this thread and they seem more like network scanners or simple asset managers. Barcode reading is optional, but it would be nice. Any suggestions?

Yeah it would be. I use it in our district and just tick the view only box and I can see if a machine is idle or being used. The software needs to be on both machines however, but that's a small gotcha as there are a few options to push out vnc apps via group policy software installations.

Make sure that the drive or directory used to host the image files has account used in the Deploy Studio wizard listed in the ACL section it can be set to Read-Only. Posix permissions are a little tricky as it can be different. I have root (R+W) admin (R+W) and others (No Access). wazmac || OSX 10.6 Server Setup Notes has a client imaging guide which goes through the steps to setup Deploy Studio. It might worth a read through to see if anything was missed.

It's possible, but it's a pain in the backside. They're called augmented records and it will allow you to have one user from one directory (AD in this case) have two home folders. I attempted augmented records, but for the amount of users we have it wasn't time efficient as it requires a lot of hand editing the users inspector records. I'm sure some scripting genius could have automated a good deal of it but I'm no genius in that regard. You're better off with the magic triangle configuration where your established active directory domain serves both single sign on authentication and home folders.

No, the mac clients would be bound to both AD and OD. AD would still provide your authenication services, but now with the client bound to OD it can receive machine policies.

You will have to bind the client to the open directory on the mac server for machine policies to be pushed down. Your clients are probably currently bound to only AD thus they have no reason to grab the policies being pushed down from the server. The only way for your current setup to work is to edit the individual policies on locally each of your mac clients. Binding the clients to your mac server is much easier though. Just make sure your Mac server is setup correctly and that your DNS servers are in good condition.

You need to create the groups using open directory in workgroup manager. The group will appear in the left hand column and in the right hand side of the application you will have two-three tabs: basic, members and if enabled, inspector. Click members then click on the plus sign and a tray will slide out. At the very top of that tray you'll see Directory: /LDAPv3/127.0.0.1 click the downward facing chevron next to the globe and select your active directory domain and add your computers that way. Ideally you should use a magic triangle configuration which means the Mac server is bound to AD, but is also an open directory master. Then bound the clients to both AD and OD that way they login with an AD account and get network documents, but they also get managed policies from your XServe. Computer accounts will be created in both AD and OD for this to work.

Adding Storage to a FOG Server - FOGProject Wiki I've done this before, but on a clean unformatted raid volume. I would err on the side of caution and use an empty drive.

I see. If they really want to rid themselves of any excess stock of the poly Macbook then they need to rethink the pricing. I've been told we'll be going 1:1 sometime late next year in our Middle School ( grades 6-8 ) and using the Air. In that situation it's tough to tell how well they will hold up. The white Macbooks we have in rolling carts seem to be doing okay apart from the rubberized back soaking up dirt and grime and the other surfaces scratched but not overly so. With the Air lacking an optical drive and no moving parts on the hard drive one would think it would be a little more robust than the average laptop.

Not quite dead yet. It's only being sold to Education institutions now. AppleInsider | Apple's white legacy MacBook pulled, only available for education buyers

Similar question. If I were to update my personal Macbook to 10.7 would I still be able to install server admin tools so I can manage our 10.6.8 server and clients? The latest version of Server Admin Tools states it's for Lion Server only and a quick Google search got me nowhere.

Yeah I had tried a script after thinking that my GPP wasn't applying for some reason, but it looks I'll have to resort to a script for this one particular instance. What ended up being the issue is explorer.exe . A simple restart of that process and I was in business. I cobbled together a script that will kill explorer.exe, run the rmdir and attrib commands then restart the explorer.exe process. I had to place that in the registry(HKCU) using GPP as it was the only way to make sure explorer.exe had started before it would run the script. Now I just need to add my servers to the trusted sites zone as I'm getting that gd file security popup.

Got one that's doing my head in and I'm hoping somebody can give me nudge in the right direction. I'm trying to rid my local profiles of the extra folders inside of them such as Saved Games, Downloads, Links, etc.. Basically I have a GPP setup that will either hide a folder, or delete it. It works, but... just not on a fresh profile (which is local FYI). On my test accounts I have to logout and login a second time for the folder attributes and deletions to take effect. I unfortunately didn't have luxury of setting up a test environment to work out this little niggles before flipping the switch. I basically was told new machines will have Windows 7 on them and from that point (mid-late March) until now I've been tryin to work out the libraries, the desktop.ini issues, and this annoyance as well. So I'm trying to get this sorted as soon as possible. We currently run 2003R2 Enterprise boxes with large majority of our clients being XP. I have a station setup with all of the 7/2008R2 group policy management bits installed and the sysvol has been populated with the policydefinitions folder. Looking to upgrade to 2008R2 this summer, but that all depends on funding. Any help will be greatly appreciated.

That's five pounds so it would be $8.03 in our part of the world.

That's unfortunate to hear that your school is so unwilling to help. That's quite a large investment for a school to just slopply mount atop a whiteboard and walk away washing their hands of it in the process. If the other boards are mounted in the same manner then it might be that you have a board with a bad controller. Or it could just be that your board was screwed down tighter than the others and is coming in closer contact with the whiteboard behind it. It's either that or the board is being slightly warped by uneven mounting or something pressing up against it, which can also cause the same issues. The easiest way to test the whiteboard theory is to dismount the board. It's relatively easy just remove the pen tray, remove the two screws holding down the bottom bracket and then get a helper to help lift the board up and off the hanger. Then just rest it on the floor, preferably away from a whiteboard and have somebody try to draw a straight line or anything really and see what shows on your computer monitor.