I’m not sure if this is already known news but it was news to me when I discovered it a month ago.
You CAN manage ‘byhost’ settings in 10.4.
Read on for more…The procedure is actually almost painfully simple.
First wipe all the ‘byhost’ settings on a example machine and reboot. Then set all the appropriate preferences on a example machine.
After this is done go into the byhost folder for the user or system and copy them to the desktop. Strip off the mac address from the file name (com.apple.screensaver.plist for example) and then open the file in Property List Editor.
From here you can clean up any prefs you do not want to push out to clients, make sure to do this step as there are some things that could cause problems passing out to machines.
After you have saved the file, open up Workgroup Manager and go to the preferences for the machine, group or users you want and then go to the details tab. Now click the add button and add the saved out and edited file. Now you will be able to move around all the separate prefs to once, often and always. Once you save the preferences will be pushed out to the clients like any other MCX pref.
I have tested this in 3 different setups running 10.4.2 and 10.4.3 with com.apple.screensaver.plist and I propagated at the machine level, finally allowing me to force screensaver times and password on wake from screensaver/sleep. This was viewed as a huge security issue in our environment.
So simple, and yet incredibly useful. Wow. I’ll be testing this out soon.
—
Mat X – Mac VFX SysAdmin
You could use a login hook that fixes the ByHost and just push the files out.
Or you could get an OD server and do a magic triangle setup.
—
Breaking my server to save yours.
Josh Wisenbaker
http://www.afp548.com
Yeah, I wouldn’t expect the itunes one to work since that is where it holds
authorization info for iTunes store purchases.
—
Breaking my server to save yours.
Josh Wisenbaker
http://www.afp548.com
Setup your screen saver preferences and push the plist out to here:
/Library/Managed Preferences/com.apple.screensaver.plist
I’m using an all AD environment too, and it worked for me.
It appears that this actually does not work as I originally thought. The managed
preference does not survive through a reboot or new login.
Now that you mention iTunes, I want to make sure you know about John DeTroye’s documentation on using mcx with iTunes:
http://homepage.mac.com/johnd/.cv/johnd/Sites/.Public/Latest_Tips/Tiger-tips/mini-tandt-itunes5.pdf-zip.zip
Per the latest (10.4.10) version of JohnD’s Tips and Tricks document, WGM after 10.4.4 actually does the MAC stripping automatically when the preference is added to the Details pane. I’m testing this out with screensaver and firewall now, seems to be working for new logins but I have to work on getting it to stick ‘always.’
—
Michael T. Rose
mjm creative services | http://www.mjmcreative.com/