[tlarkin]

This will kick start ARD client in 10.5

[url]http://tlarkin.com/tech/kick-start-ard-remote-management[/url]

Fill in the blanks on what user account you want to use it. Let me know if you need any help.

[tlarkin]

You should be able to lock that down via MCX. If you are running OD servers that is. Whatever plist controls remote access you need to dump that into the managed client application in WGM. Then set the string to always and make sure it is always on.

That should do the trick, but I don’t know what specific plist file you would need off the top of my head.

[tlarkin]

Do these users have admin rights? I typically set ARD access to a single, hidden local admin account that I can use for local administration on every machine.

I have scripts that kick start the ARD client after imaging and enable my hidden user account.

[tlarkin]

Free, no need to open prots, all over port 443 and it is web based and platform independent.

[url]http://www.logmein.com[/url]

No need to fuss with port forwarding and if there are multiple machines behind a router no need to forward multiple ports.

[tlarkin]

I know this is old, but have launchd run it instead of crontab. Crontab is depreciated now and launchd pretty much controls all daemons from 10.4 and higher.

[tlarkin]

MCX is great for this, so is powerful third party tools like Casper and Composer that can capture and enforce user level preferences.

[tlarkin]

By default all local accounts have a UID of 500 to 999 and all open directory accounts, be portable or network have a UID of 1000 or greater. You can maybe do it by UID I think.

Another method is if you do an authenticated bind you can set computer group policy to apply MCX to local user accounts via WGM and don’t even have to script anything out.

[tlarkin]

Do you run layer-3 switches? This should allow broadcasting across VLANs if it is set up right.

[tlarkin]

I am no expert, but in server 10.5 it uses the [color=Blue]changeip[/color] command to resolve DNS. So make sure your DNS is in order, and if it is not you may have to destroy LDAP and rebuild it. To do so run this

ssh into your ODM

changeip -checkhostname

[tlarkin]

I had similar issues, and found this:

[url]http://bigmaconcampus.wordpress.com/2009/03/25/wireless-installer-for-the-masses/[/url]

I also have used a launchd item that runs at boot and will connect to desired SSID with the passkey but it does not add to the user’s keychain.

[tlarkin]

LOM on the Xserves uses a specific port that needs to be open for it to work.

623 UDP Lights-Out-Monitoring – Used by Intel Xserves’ Lights-Out-Monitoring (LOM)

source:

http://support.apple.com/kb/TS1629?viewlocale=en_US

[tlarkin]

Well,

After some research and deliberations, we are going to try out Aruba at one of the buildings and see how it goes. We got them to come into our infrastructure and drop 6 APs and one controller in to see how it fairs. Talking with their sales engineers it seems that a lot of the problems with the Cisco hardware is that when the Mac beacons from being waken from sleep, there is some sort of communications issue.

After googling the heck out of it and hopping on some mailing lists we are not the only school district/enterprise network that has this issue.

[tlarkin]

Well….

Umm I think, and this is me thinking so not 100% sure on this, you can use the setfile command in Tiger to hide a volume. You can also script with the mv command to rename it with a dot in front of the name which also hides it from the finder.

Good luck, let me know how it works for you.

[tlarkin]

I think in OS X server that option is grayed out but it is probably controlled by a plist file somewhere. I am sure if you narrow it down you can edit the plist file in OS X Server to do what you want it to do.

[tlarkin]

if you log into a working account on one machine and then a non working account on the same machine what do the system logs tell you? Anything?

I can only suspect the import had conflicting data on it, maybe it was assigning them the same UID or something which disabled the old account?

[Author]

Posts