MCX settings

Good folks out there;
On 13 Nov 2009, at 16:02, Nick Caro wrote:

We are experimenting with MCX Setting Configurations.
In the process we have created a sample configuration and using the Scope set it to allow these settings on one specific computer.

Is it possible for these MCX settings to somehow spread out in to other areas of our configurations?
Is it possible for these MCX settings to somehow spread out to our image configurations?

Is it true that by setting the scope to only hit that one computer will contain this configuration to that one unit?

Yup, that's my experience: MCX settings only apply to the computers or computer groups you've scoped. I have a configuration for a test machine that is scoped just to that machine, and when I'm happy that the settings are doing what I want I add them to the configuration that's scoped for the production machines, and off they go. Any other behaviour would be pretty alarming.

Cheers

James

~~~~~~~~~
Dr. James Partridge
Systems Development & Support (Apple)
NSMS
Oxford University Computing Service
13 Banbury Road
Oxford OX2 6NN

Tel.: (01865) 273207

I have been working with MCX settings in Casper for System preferences, and I hit a snag. I am specifically dealing with the MCX setting for System preferences. I have a test JSS setup with 5 computers registered to only this test JSS, they are bound to AD for authentication. I have the MCX setting set to restrict the “Security” tab in System preferences. This seams to work fine, when set it to scope to all computers. The snag I am seeing is when I set the MCX setting to “Limit this Setting to the following Users” and I add in a computer group. This seems to remove the restriction completely. I have tested it with a test account that is only in the group I am limiting to and still it will not work. As soon as I remove that limit, the MCX setting behaves accordingly. I wanted to see if anyone else had seen this.

Sean

Maybe it can't be scoped that way because it is a System Level Enforced
setting?

Just guessing as we scope all our MCX to the machines and not the user so
even if someone is an admin on a student machine they are still restricted.
Only takes an extra second to trash /Library/Managed Preferences to get
into System Prefs soo... *shrug*

Ryan M. Manly
Glenbrook High Schools

What version of the JSS are you using? Are you scoping to a casper static list or smart list, or are you scoping to an AD group?

I am testing this on 7.3.1, I have the scoping to all computers (there's
only 5 for this test) and it is limited to an AD group. The MCX is set to
user level.