Default User Profile/Template

[jafuller]

Is there anyone out there installing their own custom user template (/Libarary/User Template/English.lproj)? Or are you using post-image and login scripts to update user settings? Very curious on how others are attacking this.

Also, along these lines does anyone know how to update the login picture that is used for remote user accounts? I can't find it and I'd really like to set this to our internal standard.

Thanks!

James Fuller | Starbucks Coffee Company | Technology Application Services | application developer II
E: jafuller at starbucks.com<mailto:jafuller at starbucks.com> | V: 206.318.7153 | F: 206.318.0155

Technology does not drive change -- it enables change.

[Matt]

I no longer use the English.lproj I do everything through MCX and Policy. I do have a package that I run that changes the login screen graphics and the System Profiler graphics.

http://casperadmins.com

--
Matt Lee
FNG Sr. IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group
matthew.lee at fox.com<mailto:matthew.lee at fox.com>

Need Help? Call the Help Desk at (310) 969-HELP (ext 24357) or online at http://itteam<http://itteam/>
Help Desk Hours: Mon-Fri, 6AM-6PM PST

[bentoms]

I've changed it. But can't remember how I did it!

I'll look at the pkg I created & will let you know.

I think it lives in /system/library/coreservices/loginwindow.bundle

Look at the contents, find the icon, rename it & replace with an icon same size, name & permissions in the folder.

Test the composer it.

But if I have time tomorrow I'll dig it out.

Regards,

Ben.

[talkingmoose]

I'm not necessarily customizing the entire user template but I do drop
On 5/12/11 4:37 PM, "James Fuller" <JaFuller at starbucks.com> wrote:
items into it that can't be managed via MCX such as a default Microsoft
User Data folder and QuarkXPress preferences.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

[#5]

Around here, we modify the user template for some settings (via FUT, mostly), and we use MCX for the rest.

You should be able to look up the file's name and path in dscl. Then perhaps searching /System/Library/CoreServices or /Library/Preferences for that text will provide the location of the setting. Or you could just replace the image in-place, though that's probably not the best idea (it could easily revert during an update).

Upon investigation, I was unable to find the setting in my DS data. I looked into /System/Library/CoreServices, and found a large repository of system icons at /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources (If you're ever looking for an icon for something in Mac OS, this is a good place to look first). This does not contain the icon in question, however.

Looks like the file you need is /System/Library/CoreServices/Directory Utility.app/Contents/Resources/networkUser.tiff.

[jarednichols]

You're going to need to run Composer as root as the User Templates folder
is owned by root:wheel.

j
-- Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[bentoms]

Why not do it in parts & distribute it in Casper so it fills user templates &/or existing users?

I.e if you've an account that's on all macs, set it up the way you want & composer all the parts.

That way it's modular so you can change one thing at a time if needed (like homepage or desktop).

Regards,

Ben.

[talkingmoose]

Drag your .dmg file into Composer and then click the "Convert to Source"
On 5/13/11 12:54 PM, "James Fuller" <JaFuller at starbucks.com> wrote:
button.

You should see the folder hierarchy such as /Users/anyuser/path/to/files.

So long as you have this path in your .dmg file and you select "Fill User
Template" then Casper knows to install the files into the User Template
folder too. No need to create a "/System/Library/User Template" set of
files.

As for permissions, I use the Terminal to view permissions of Users,
anyuser and existing folders in the /path/to files. Then I match those
settings in Composer. Really, any files beyond the user's top level
folders are accessible only to him and permissions aren't as critical. I
just like to be thorough.

--

William Smith
Technical Analyst
Merrill Communications LLC
(651) 632-1492

[#9]

Huh? You're trying to replace the user template? I think that would be a Bad Thing™ to do. All sorts of applications and system packages put stuff in there, and expect it to never be removed. What are you trying to accomplish with this?

[Matt]

I would honestly just leave the user template alone. I would just package any universal changes and have it applied at first user login.

--
Matt Lee
FNG Sr. IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group
matthew.lee at fox.com<mailto:matthew.lee at fox.com>

Need Help? Call the Help Desk at (310) 969-HELP (ext 24357) or online at http://itteam<http://itteam/>
Help Desk Hours: Mon-Fri, 6AM-6PM PST

[jafuller]

To all who responded, thank you! Great feedback and I appreciate the direction.

James Fuller | Technology Application Services | application developer II | V: 206.318.7153

Technology does not drive change -- it enables change.

[jafuller]

Ok, so we currently have a User Template that I need to update. However,
I wasn't the one who created the DMG. So, I would like to know if any of
you have instructions on how to package up the User Template with the
proper permissions so that I don't screw it up by modifying what we have.
Is it just a standard Composer DMG? When I use Composer, it doesn't pick
up the English.lproj directory.

Thanks so much guys!

--
James Fuller | Starbucks Coffee Company | Technology Application Services
| application developer II
E: jafuller at starbucks.com | V: 206.318.7153 | F: 206.318.0155

Technology does not drive change -- it enables change.

[bentoms]

How are you setting that? Per user? What about environments where multiple people log into macs?

i.e Freelance machine used with AD accounts.

Regards,

Ben.

[Matt]

All settings are applied at first login, and you can run a policy flush before to initiate.

--
Matt Lee
FNG Sr. IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group
matthew.lee at fox.com<mailto:matthew.lee at fox.com>

Need Help? Call the Help Desk at (310) 969-HELP (ext 24357) or online at http://itteam<http://itteam/>
Help Desk Hours: Mon-Fri, 6AM-6PM PST

[bentoms]

Good point. But won't that apply at every login?

Often you'll want to set the desktop background, but allow the users to change. So 1st login has custom.

Regards,

Ben.

[Matt]

You can tell the policy to run Once. Just have to make sure you put the policy flush in.

--
Matt Lee
FNG Sr. IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper Administrator
Fox Networks Group
matthew.lee at fox.com<mailto:matthew.lee at fox.com>

Need Help? Call the Help Desk at (310) 969-HELP (ext 24357) or online at http://itteam<http://itteam/>
Help Desk Hours: Mon-Fri, 6AM-6PM PST

[LVISDJShip]

Matt,
Where is this policy flush you mention?

Thanks, :)

[tep]

My only problem with FUT is that I have certain settings for regular Lab Users, and others for my admin user (dock, etc). I use FUT for as much as I can, and then update English.lproj for everything else.