We found out today that half of the workstations in one of the environments we support lack our hidden local admin account (let's say it's "jsmith"). We found the cause and fixed the problem. But we're left with several hundred Macs that need the jsmith account recreated. Was thinking of this approach...
Create a Smart Group to identify computers missing the jsmith account (set to include hidden accounts in search)
Scope a policy to the Smart Group that recreates the jsmith account...the script would include this command pulled from our QuickAdd package:
-------------- begin ----------------
#!/bin/sh
#
# Create hidden jsmith admin user account.
#
/usr/sbin/jamf createAccount -username 'jsmith' -realname 'jsmith'
-passhash 'xxxxxxxxxxpwdstringxxxxxxxxxx' -admin -hiddenUser
exit 0
-------------- end ----------------
Not thrilled at the idea of using Smart Groups (yet) since JSS isn't as beefy as we need it to be. But I wanted to bounce this off the group before we begin testing, to make sure we're doing this the easiest, most manageable way.
Thanks for any feedback!
Don
