TweetFollow Us on Twitter

Managed Preferences, Part 2

Volume Number: 24 (2008)
Issue Number: 02
Column Tag: Operating Systems

Managed Preferences, Part 2

New options in Workgroup Manager in Leopard

By Philip Rinehart, Yale University

Managed Preferences

A couple of months ago, I talked a little about all of the new command line options for troubleshooting Managed Preferences. In short, many new options are available for the system administrator. Well, even more love was given to the Preference Manifest Editor. New to Tiger, any preference could be managed in theory, as long as the manifest existed in the application. In Leopard, Apple engineers added some new abilities, many of which are quite powerful.

Getting started

To get started is pretty simple. It is explained in the Leopard server guide. However, I had to play with it a little bit to really understand it fully. Another useful tip, Leopard Server is not needed to play with the manifests. How, you ask? It is actually pretty easy. First, download a copy of the Leopard Server tools from the Apple download website. Install them, and launch Workgroup Manager. Now, instead of actually authenticating against a server, click Cancel. Next, click View Directories from the Server menu.


Figure 1

A window similar to Figure 1 should appear. Note that the Local Directory is being viewed, here not an Open Directory server. Click the Lock to authenticate, and enter an administrator account on the machine. For my testing, I created a testmcx user. This user will also appear in the System Preferences Accounts panel; the account appears as a managed account. So far, not so different from Tiger, right? Select a user, and click on Preferences. Nothing is managed initially, as expected. Click on the Details button. Nothing appears in the window. Now, here's where it begins to get interesting. Click the Plus button. The dialog box asks for a location. Use the Command-G option to navigate to the /System/Library/CoreServices directory. Next choose the ManagedClient application. Whoah, look at all of the applications that can now be managed! Your WGM screen should be similar to Figure 2:


Figure 2

Pretty interesting, eh? Many of these preferences cannot be managed via the standard Preferences interface. The next question is how do you actually manage these preferences? Let's look at two of them.

Folder Redirection

As noted on AFP548.com, a very interesting option is the use of Folder Redirection. Let's get started. First select the Folder Redirection option, and click the Edit icon. At first the Dictionary will appear to be empty. There's a bit of a trick to actually get it to work. Choose Always, and click the disclosure triangle so that it points downward. Next, click New Key. Still doesn't look very interesting does it? How do you pick the right key? Here's where the magic is, click on the new item.


Figure 3

Voila! There are now multiple ways to redirect, login, logout as shown in Figure 3. Select any one of them, and it will create an array of keys that are pre-populated. Keep clicking New Key if the key is not a string, but instead an array or dictionary. Try it out; it's pretty self-explanatory once you understand the little trick to get it working. Another tip, in the window at the bottom of the Workgroup Manager screen, a full explanation of how the key is used is given. Pay attention to it, as it is written fairly clearly.


Figure 4

Figure 4 shows how a fully populated Redirection key will look. The default option is to delete the folder in the local home directory and put in a symbolic link to the redirected folder. One other note, how does the redirector know the user? For all of these managed preferences, the %@ is used as a replacement for the currently logging in user. From a scriptwriter's perspective, this substitution is slightly different as script writers have gotten used to using the $1 substitution. One other note: this key can be managed as Once, Often or Always. Not all keys can be managed this way. Let's look at one that can only be managed as Always.

Bluetooth

Bluetooth commonly needs to managed in more secure environments. In particular, the ability to even turn on Bluetooth may need to be disallowed. In this case, try adding the key as Often or Once. Note that there are no options available. The Bluetooth managed preference key can only be managed Always. It makes sense if you think about it, as from a security standpoint a system administrator would always want it be off. If you use the Always key, an option to Disable Bluetooth appears. In my book, this ability is long overdue!

Other keys can be managed, including iWork and QuickTime registrations, as well as a more extensive number of keys for mobile computing. A couple of keys have solved nagging problems right away in my work, including the ability to control the Safari downloads location, turning off Autofill for Safari, and Open Safe Downloads, all things that can make more sense to manage from a server.

One last thing, since this article talks about how to use the local directory for management, these modifications could be used as part of an image distribution mechanism, and not require Leopard Server. However, management in this way really isn't scalable, but might work for a test deployment to explore the new options available for system administration.

Well, that's about it for this month. I encourage you to explore the new options available, and if options are missing that you would like to manage, make sure to submit a Feature Request. Only through feature request submissions will more options be added! Until next month, I'll see you on the lists!


Philip Rinehart is co-chair of the steering committee leading the Mac OS X Enterprise Project (macenterprise.org) and is the Lead Mac Analyst at Yale University. He has been using Macintosh Computers since the days of the Macintosh SE, and Mac OS X since its Developer Preview Release. Before coming to Yale, he worked as a Unix system administrator for a dot-com company. He can be reached at: philip.rinehart@yale.edu.

The MacEnterprise project is a community of IT professionals sharing information and solutions to support Macs in an enterprise. We collaborate on the deployment, management, and integration of Mac OS X client and server computers into multi-platform computing environments.
 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Latest Forum Discussions

See All

Top Mobile Game Discounts
Every day, we pick out a curated list of the best mobile discounts on the App Store and post them here. This list won't be comprehensive, but it every game on it is recommended. Feel free to check out the coverage we did on them in the links... | Read more »
Price of Glory unleashes its 1.4 Alpha u...
As much as we all probably dislike Maths as a subject, we do have to hand it to geometry for giving us the good old Hexgrid, home of some of the best strategy games. One such example, Price of Glory, has dropped its 1.4 Alpha update, stocked full... | Read more »
The SLC 2025 kicks off this month to cro...
Ever since the Solo Leveling: Arise Championship 2025 was announced, I have been looking forward to it. The promotional clip they released a month or two back showed crowds going absolutely nuts for the previous competitions, so imagine the... | Read more »
Dive into some early Magicpunk fun as Cr...
Excellent news for fans of steampunk and magic; the Precursor Test for Magicpunk MMORPG Crystal of Atlan opens today. This rather fancy way of saying beta test will remain open until March 5th and is available for PC - boo - and Android devices -... | Read more »
Prepare to get your mind melted as Evang...
If you are a fan of sci-fi shooters and incredibly weird, mind-bending anime series, then you are in for a treat, as Goddess of Victory: Nikke is gearing up for its second collaboration with Evangelion. We were also treated to an upcoming... | Read more »
Square Enix gives with one hand and slap...
We have something of a mixed bag coming over from Square Enix HQ today. Two of their mobile games are revelling in life with new events keeping them alive, whilst another has been thrown onto the ever-growing discard pile Square is building. I... | Read more »
Let the world burn as you have some fest...
It is time to leave the world burning once again as you take a much-needed break from that whole “hero” lark and enjoy some celebrations in Genshin Impact. Version 5.4, Moonlight Amidst Dreams, will see you in Inazuma to attend the Mikawa Flower... | Read more »
Full Moon Over the Abyssal Sea lands on...
Aether Gazer has announced its latest major update, and it is one of the loveliest event names I have ever heard. Full Moon Over the Abyssal Sea is an amazing name, and it comes loaded with two side stories, a new S-grade Modifier, and some fancy... | Read more »
Open your own eatery for all the forest...
Very important question; when you read the title Zoo Restaurant, do you also immediately think of running a restaurant in which you cook Zoo animals as the course? I will just assume yes. Anyway, come June 23rd we will all be able to start up our... | Read more »
Crystal of Atlan opens registration for...
Nuverse was prominently featured in the last month for all the wrong reasons with the USA TikTok debacle, but now it is putting all that behind it and preparing for the Crystal of Atlan beta test. Taking place between February 18th and March 5th,... | Read more »

Price Scanner via MacPrices.net

AT&T is offering a 65% discount on the ne...
AT&T is offering the new iPhone 16e for up to 65% off their monthly finance fee with 36-months of service. No trade-in is required. Discount is applied via monthly bill credits over the 36 month... Read more
Use this code to get a free iPhone 13 at Visi...
For a limited time, use code SWEETDEAL to get a free 128GB iPhone 13 Visible, Verizon’s low-cost wireless cell service, Visible. Deal is valid when you purchase the Visible+ annual plan. Free... Read more
M4 Mac minis on sale for $50-$80 off MSRP at...
B&H Photo has M4 Mac minis in stock and on sale right now for $50 to $80 off Apple’s MSRP, each including free 1-2 day shipping to most US addresses: – M4 Mac mini (16GB/256GB): $549, $50 off... Read more
Buy an iPhone 16 at Boost Mobile and get one...
Boost Mobile, an MVNO using AT&T and T-Mobile’s networks, is offering one year of free Unlimited service with the purchase of any iPhone 16. Purchase the iPhone at standard MSRP, and then choose... Read more
Get an iPhone 15 for only $299 at Boost Mobil...
Boost Mobile, an MVNO using AT&T and T-Mobile’s networks, is offering the 128GB iPhone 15 for $299.99 including service with their Unlimited Premium plan (50GB of premium data, $60/month), or $20... Read more
Unreal Mobile is offering $100 off any new iP...
Unreal Mobile, an MVNO using AT&T and T-Mobile’s networks, is offering a $100 discount on any new iPhone with service. This includes new iPhone 16 models as well as iPhone 15, 14, 13, and SE... Read more
Apple drops prices on clearance iPhone 14 mod...
With today’s introduction of the new iPhone 16e, Apple has discontinued the iPhone 14, 14 Pro, and SE. In response, Apple has dropped prices on unlocked, Certified Refurbished, iPhone 14 models to a... Read more
B&H has 16-inch M4 Max MacBook Pros on sa...
B&H Photo is offering a $360-$410 discount on new 16-inch MacBook Pros with M4 Max CPUs right now. B&H offers free 1-2 day shipping to most US addresses: – 16″ M4 Max MacBook Pro (36GB/1TB/... Read more
Amazon is offering a $100 discount on the M4...
Amazon has the M4 Pro Mac mini discounted $100 off MSRP right now. Shipping is free. Their price is the lowest currently available for this popular mini: – Mac mini M4 Pro (24GB/512GB): $1299, $100... Read more
B&H continues to offer $150-$220 discount...
B&H Photo has 14-inch M4 MacBook Pros on sale for $150-$220 off MSRP. B&H offers free 1-2 day shipping to most US addresses: – 14″ M4 MacBook Pro (16GB/512GB): $1449, $150 off MSRP – 14″ M4... Read more

Jobs Board

All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.