Is iLife 11 installed on these Macs?

Bentoms,

I work with Frank, so No iLife 11 is not installed on those Macs.

iWork?

what i did was go through the setup and capture the entire com.apple.SetupAssistant.plist throw it into the homes you don't want to see it. so new machine put it in the template, existing machines each users Library/Preferences
Seems to be working fine.

Rich Trouton has a write-up on this, we were able to adapt his script to our environment fairly easily.

http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/

Thanks benleroy that worked.

I've been trying to get remove icloud / appleid login when I create new users on a Mavericks system.

I've tried to capture the settings in the com.apple.SetupAssistant.plist and to deploy them with FET / FUT in a DMG. Didn't get that to work.

I've also tried to upload the .plist for the settings as a configuration profile but I'm not getting that to work properly either. Also tried with different MCX settings, like changing the version from 10.8 to 10.9.

And I've tried Rich Troutons script from Der Flounder. Still not getting it to work. Do you have any suggestions?

@makander][/url,

How are you running the script? As written on my blog, the script is designed to be run as root.

In my own shop, I have this included as part of a first boot script:

https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/first_boot/10.9

Hi Rich!

I ran it at imaging with Casper Image. Tried running it with the script set at 'after' and I also tried with it being set at being run at 'reboot'. When I didn't get that to work I put it in /Library/Application Support/jamf/bin/ and from there ran it with a policy. Casper runs at root if I'm not mistaken.

Aha! I figured out what I was doing wrong! I had MCX set (it's always MCX's.... I should probably stop using them) for both 10.8 and 10.9 and since I forgot to scope the MCXs to the correct group it probably got both, or none, and then it didn't work!

According to the community, this should be working on 10.9:
http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/

we tested working on 10.9

According to the community, this should be working on 10.9:
http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/

we tested working on 10.9.1

I'm still having a problem with this on 10.9.1.
We're trying to go fully modular this year, and so I've created a virgin OS image using AutoDMG and created my local admin user using the "CreateUserPkg" utility. (I did create the package to place the home folder in /var, to keep it hidden from nosy students).

I've copied the script referenced above (http://derflounder.wordpress.com/2013/10/27/disabling-the-icloud-sign-in-pop-up-message-on-lion-and-later/) and created a workflow in DeployStudio which has 3 steps:

1. erase & image
2. disable icloud script
3. install user via package

Full Disclosure: I also tried to put a "touch" in the script to create the .AppleSetupDone file, but (for whatever reason) the touch fails, so I converted the dmg to a sparsebundle, added the .AppleSetupDone file and then converted back to a dmg.

Anyways, after imaging, I log in as my local admin and the iCloud window appears.

I held down the power button and put the computer into target disk mode. I verified that the plist is in the user template (English.lproj) and that the 3 keys exist in the file. I also determined that the Home folder doesn't yet exist (checked in /Users & in /var).

I boot back to the computer and log in again. This time it boots right to the desktop. Also, all subsequent accounts created after this don't get the iCloud prompt (just the first user). Just for kicks, I also tried re-booting after imaging, but before logging in, but that didn't change anything.

So, any idea what I'm doing wrong? Does the first user not use the template (or use a different template)? Any help would be appreciated.

Try switching the order in which you create your first user and you disable iCloud. So, switch #2 and #3 in your DS workflow. See if that works.

You are creating the admin user before the User Template files have been updated, so the iCloud "skip" will not have been ready for copying to the first user's home folder.

I'll give it a try, but currently I have the script running first (to update the user template) before creating the user.

I don't see how changing the workflow to create the user before running the script will help. Especially since the home folder isn't in /Users…

I'm willing to try it however, so I'll let you know how it goes.

I'll give it a try, but currently I have the script running first (to update the user template) before creating the user.

I don't see how changing the workflow to create the user before running the script will help. Especially since the home folder isn't in /Users…

I'm willing to try it however, so I'll let you know how it goes.

I'll give it a try, but currently I have the script running first (to update the user template) before creating the user.

I don't see how changing the workflow to create the user before running the script will help. Especially since the home folder isn't in /Users…

I'm willing to try it however, so I'll let you know how it goes.

Ugh, I must have been asleep when I read that originally. You have it correct: run the iCloud script first, then create the user. Sorry.

What you can try is copying the User Template into the hidden account home folder location. I cannot recall of CreateUserPkg creates the home folder files or if it copies from the Template folder. So to make sure you are getting the home folder from the Template, you could add something like this:

rm -rf /var/admin/*
    cp -R /System/Library/User Template/English.lproj/* /var/admin/
    chown -R admin:staff /var/admin

That will insure you are using the Template files and not something else.

Ok, I'll try that.

We set ours via user level MCX.

Where is asks for "OSVers" as per @rtrouton's script.. We set it to 10.7.9, 10.8.9 & 10.9.9 & scope the MCX to smart groups based on OS version.

Seems to work. (Pretty sure that's what we do).

Dismiss my reply above, below is what we're doing:

Hi All,

Just checked how we've overcome this.

We modify the plist as per @rtrouton's post, but change the OS version to 10.9.9.

The package up the plist & deploy @ imaging using FEU/FUT's.

That way even the adobe install account has the setting when 1st logging in.

@bentoms I am attempting the packaged method now. Question, how do you apply this for existing machines that might upgrade to Mavericks via Self Service? I tried the scripted method, and applied the plist updates just prior to the self service upgrade, but haven't had success with existing accounts. I am going to try the packaged version and see if i have better luck.

Thanks for the info.

I didn't notice there was more replies to this post! :)

I found the fix in the end was creating a MCX key in the JSS as we set it locally at build time, but also enforce it via MCX as local accounts (out support admin account as an example) wasn't using this key only mobile accounts where.

Domain: ~/Library/Preferences/com.apple.SetupAssistant
Key: LastSeenCloudProductVersion
Value: 10.9.2

You can make the value 10.9.9 as suggested but I haven't tested it to see if there is any negative effect.

I did a machine profile with DidSeeCloudSetup -bool TRUE
GestureMovieSeen string none
LastSeenCloudProductVersion string 10.9.3

Worked fine for updating from 10.9.2 to 10.9.3
I did try 10.9.9 as value - this did not work in my setup.

to add another wrinkle:

we use rich's script as well. and it works really well for any user i create with either CreateUserPkg or via the CLI in the shell. there's just one user account for which it doesn't work:

the root user.

and please: no arguments against using the root user please, i've heard them all and we still use it here. so, i continue to experiment with finagling the root user code but, essentially it's identical to the +500 UID code, minus the path:

# variable
RootPrefs="/private/var/root/Library/Preferences"

defaults write "${RootPrefs}"/com.apple.loginwindow -dict ”
defaults write "${RootPrefs}"/loginwindow -dict ”
defaults write "${RootPrefs}"/com.apple.SetupAssistant DidSeeCloudSetup -bool TRUE
defaults write "${RootPrefs}"/com.apple.SetupAssistant GestureMovieSeen none
defaults write "${RootPrefs}"/com.apple.SetupAssistant LastSeenCloudProductVersion "${sw_vers}"

much obliged if anyone's seen this issue on the root user account. i can't get the dang thing to work. meh.

cheers n' beers,