So in a previous image I noticed that although “Allow network users to log in” was checked, the group com.apple.access_loginwindow didn’t exist.
Now I’m working up a software update procedure that relies on manipulating this group to disable user logins while updates are being applied, so I need the file /var/db/dslocal/nodes/Default/groups/com.apple.access_loginwindow.plist to exist on workstations.
My question is:
Does the generateduid key make a difference? I have successfully tested copying this file to a workstation that lacks it and had things work fine, but does anyone know if this would cause me problems in the future if I rolled it into the image?
I attempted to dynamically script the creation of this group so the generateduid would be unique to each system, but that approach doesn’t seem to work, even though I can make it match one generated by the OS exactly :\
.
.
Comments are closed