Help with script at imaging

There are several issues.

First - the script will run as root anyway, so you can remove all the "sudo's"
Second - defaults will be writing to the root user's home folder. Because you are not specifying a specific user domain, and the script is running as root. Those preferences are user level preferences, so if you want them to stick to all users who have not yet logged in - then each defaults should be "/usr/bin/defaults write /System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder ShowRemovableMediaOnDesktop -bool true" as an example.

But perhaps the best thing you can do is wrap your entire script into a function, and then direct the whole function to a test log file - just while you are testing.

So - change your script to ------------------------------------

#!/bin/bash

myFuntion ()
{
<< Now erase this entire line including arrows and replace with your script here >>
}

myFunction > /Library/Logs/myTestLog.log 2>&1

what this will do is create a log file at /Library/Logs. the "2>&1" tells the script to write all standard output and standard error to the log file.

This will help you debug and figure out where things are going wrong.

A long time ago, I was in your exact spot. So GOOD LUCK.

Jeff,

I hate to give you even more bad news, I think some of the setting can't be set that way any more... please see

http://managingosx.wordpress.com http://gregneagle.github.io/mtc2013_python/

Also, I think you can and should configure casper to enable SSH .....

in your JSS go to : Computer Management Framework Settings/startup item

I know this goes against the norm, but take a some time and think about why and what setting you really most set, for example "Show Hard Disks On Desktop" ..... We had this on for the longest time and final I asked why, it's not Apple default why are we changing it? Most users are used to the Apple default now with no disk on the desktop..... It's a tricky question and there is no "right" answer, but why make more work for your self : ) I think of it focus on the security setting and truly required changes.

Good Luck!!

C

@gachowski

for example "Show Hard Disks On Desktop" ..... We had this on for the longest time and final I asked why, it's not Apple default why are we changing it?

enabling ssh is also not Apple default... just sayin ;)

I asked our help desk team if I should stop making all of the old school changes to Finder preferences. They requested to continue showing the hard drive on the desktop, hiding "All My Files", show Status bar, display scroll bars, etc. Their reasoning is it so much easier to navigate the user over the phone when they call for help.

@jhalvorson : my thoughts exactly. Since our drive names are also the Macs name, it is easy to direct a user to the computer name. The path bars help for navigation and if we need to get a screen shot of the finder location where they're having xyz issue. There are a multitude of reasons for keeping these "old school" settings. Just because Apple wants people to forget about the filesystem doesn't mean we should in the support world.

This isn't exactly what you asked for, but we actually create and package a default user template, rather than scripting stuff like this. Depends on how you want to do the work.

Thanks for the responses. Personally, I would love to get rid of the Finder prefs. However, its is easier for our Help Desk to walk our users through navigating to folders.

We used to set all these settings on the OS X image and build them out monolithically. Being as I was the only one doing this it was time consuming. I have moved to making the OS X portion of the image with AutoDMG and adding to the workflow in Casper Admin. It has really completely reduced the amount of time it takes me to make our images. I have spend the last two years working nonstop on images from mid July to late August. I would love to spend my summer not being image boy :)

Forgot to add our machines are not bound to OD or AD. All of our faculty and staff are local admins. Our lab machines have a single "lab user" log in but are not admins.

I feel you; if it wasn't clear, our template package is separate from our OS package, and I haven't updated it since 10.8, so it's still quite modular and consistent with thin imaging practices. To each his own; the script is a nice way to go about it.

@JPDyson can you point me in the direction of your template package? I removed the sudo from the commands. Everything works down down to the natural scrolling. Thats when it stops working now. After talking to our help desk they have more things they want more Finder settings brought back to the image. For some reason not having a scroll bar and natural scrolling causes havoc for our users.

Why not use MCX to set the Finders prefs?

check out Rich Trouton's github for ways to deal with user template issues. His firstboot scripts deal with the iCloud login stuff but the same techniques apply.

Thanks everyone! I got what I needed with the Finder issues figured out.

@jyoung, I don't know if you still need any scripting stuff, but I figured I'd post my preferences script in case you have a use for any of the settings I've been setting over the (gasp, I feel old!) years. :)

1#!/bin/sh
2#Declare Variables
3OSVer=`sw_vers -productVersion`
4HWType=`/usr/sbin/system_profiler SPHardwareDataType | grep "Model Identifier" | grep "Book"`
5
6#This sets the login window and screen saver preferences.
7defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "You are accessing a [redacted] computer network for authorized users only. Use of the network constitutes consent to all [redacted] IT policies. For further information regarding those policies, refer to [silly, unclickable web url]."
8defaults write /Library/Preferences/com.apple.loginwindow SHOWFULLNAME -bool YES
9defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES
10defaults write /Library/Preferences/com.apple.loginwindow HiddenUsersList -array ardamin
11defaults write /Library/Preferences/com.apple.loginwindow ShutDownDisabledWhileLoggedIn -bool NO
12defaults write /Library/Preferences/com.apple.loginwindow RestartDisabledWhileLoggedIn -bool NO
13defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo -string 'DSStatus'
14defautls write /Library/Preferences/com.apple.loginwindow showInputMenu -bool YES
15echo "Loginwindow settings configured."
16
17#Disables Bluetooth.
18#defaults write /Library/Preferences/com.apple.MCXBluetooth DisableBluetooth -dict state -string 'always' -bool YES
19#defaults write /Library/Preferences/com.apple.Bluetooth.plist ControllerPowerState -int 0
20#echo "Bluetooth preferences configured."
21
22#Removes Bluetooth and Time Machine from the Menu Bar.
23defaults -currentHost write "/System/Library/User Template/English.lproj/Library/Preferences/ByHost/com.apple.systemuiserver" dontAutoLoad -array -string "/System/Library/CoreServices/Menu Extras/TimeMachine.menu" -string "/System/Library/CoreServices/Menu Extras/Bluetooth.menu"
24echo "Removed Bluetooth and Time Machine from the Menu Bar."
25
26# This script disables fast user switching.
27defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled -bool NO
28echo "Fast user switching disabled."
29
30#Use encrypted virtual memory
31defaults write /Library/Preferences/com.apple.virtualMemory UseEncryptedSwap -bool YES
32echo "Virtual memory secured."
33
34# Set Safari Preferences.
35defaults write /Library/Preferences/com.apple.Safari HomePage "http://www.unf.edu/"
36defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.Safari" ShowStatusBar -bool YES
37echo "Safari Settings configured."
38
39# NO .ds-store files on Network Shares
40defaults write /Library/Preferences/com.apple.desktopservices DSDontWriteNetworkStores -bool YES
41echo "DS store files disabled."
42
43# Set Apple Mouse button 1 to Primary click and button 2 to Secondary click.
44defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.driver.AppleHIDMouse" Button1 -integer 1
45defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.driver.AppleHIDMouse" Button2 -integer 2
46echo "Apple Mouse settings configured."
47
48# Set Apple Magic Mouse button 1 to Primary click and button 2 to Secondary click.
49defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.driver.AppleBluetoothMultitouch.mouse" MouseButtonMode -string TwoButton
50echo "Magic Mouse settings configured."
51
52# Disable Time Machine Offers & Auto Backup
53defaults write /Library/Preferences/com.apple.TimeMachine DoNotOfferNewDisksForBackup -bool YES
54defaults write /Library/Preferences/com.apple.TimeMachine AutoBackup 0
55echo "Time Machine settings complete."
56
57#Disable iCloud
58defaults write /System/Library/User Template/English.lproj/Library/Preferences/com.apple.SetupAssistant LastSeenCloudProductVersion -string $OSVer
59defaults write /System/Library/User Template/English.lproj/Library/Preferences/com.apple.SetupAssistant DidSeeCloudSetup -bool YES
60echo "iCloud disabled."
61
62#Configures Office AutoUpdate
63defaults write /Library/Preferences/com.microsoft.autoupdate2 HowToCheck -string Manual
64defaults write /Library/Preferences/com.microsoft.autoupdate2 LastUpdate -date '2001-01-01T00:00:00Z'
65echo "Office Autoupdate set to manual."
66
67#Configures Office Error Reporting
68defaults write /Library/Preferences/com.microsoft.error_reporting SQMReportsEnabled -bool NO
69defaults write /Library/Preferences/com.microsoft.error_reporting ShipAssertEnabled -bool NO
70echo "Office Error Reporting set."
71
72#Configure Office Setup
73defaults write /Library/Preferences/com.microsoft.office "14UserInfoUserOrganiation" -string 'University of North Florida'
74defaults write /Library/Preferences/com.microsoft.office "14FirstRunSetupComplete" -int 1
75defaults write /Library/Preferences/com.microsoft.office "14UserInfoUserName" -string 'Information Technology Services'
76echo "Office Setup configured."
77
78#Hides Office Welcome Windows
79defaults write /Library/Preferences/com.microsoft.Excel "14Microsoft ExcelHide Welcome Window" -int 1
80defaults write /Library/Preferences/com.microsoft.Outlook FirstRunExperienceCompleted -bool YES
81defaults write /Library/Preferences/com.microsoft.PowerPoint "14OptionsOptionsHide Welcome Dialog" -int 1
82defaults write /Library/Preferences/com.microsoft.Word "14OptionsHide Welcome Dialog" -int 1
83echo "Office Welcome Windows disabled."
84
85#Hides Document Galleries
86defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.microsoft.office" "14File New StateFNXCEL" -int 0
87defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.microsoft.office" "14File New StateFNPPT3" -int 0
88defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.microsoft.office" "14File New StateFNMSWD" -int 0
89echo "Office Galleries disabled."
90
91#Sets Finder Preferences
92defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder.plist" ShowMountedServersOnDesktop -bool YES
93defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder.plist" ShowHardDrivesOnDesktop -bool YES
94defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder.plist" ShowRemovableMediaonDesktop -bool YES
95defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder.plist" ShowExternalHardDrivesOnDesktop -bool YES
96defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder.plist" ProhibitGoToiDisk -bool YES
97defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.finder.plist" ShowStatusBar -bool YES
98echo "Finder Settings complete."
99
100#Disables Location Services
101defaults write /Library/Preferences/com.apple.MCX DisableLocationServices -bool YES
102echo "Location Services disabled."
103
104#iWork Registration Removal
105defaults write /Library/Preferences/com.apple.iWork09 RegistrationHasBeenSent -bool YES
106echo "iWork Settings complete."
107
108#Sets Screensaver lock settings
109defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.screensaver" askForPasswordDelay -string 1800
110defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.screensaver" askForPassword -int 1
111echo "Screensaver Settings complete."
112
113if [[ "$OSVer" = "10.9"* ]]; then
114if [ -n "$HWType" ]; then
115    defaults write /Library/Preferences/com.apple.mdmclient BypassPreLoginCheck -bool YES
116fi
117fi

@ahambidge

Does this work set as a string instead of an integer?

1#Sets Screensaver lock settings
2defaults write "/System/Library/User Template/English.lproj/Library/Preferences/com.apple.screensaver" askForPasswordDelay -string 1800

@ahambidge

Thanks for posting your script. You might take a look at the following line. It's missing the Z in organization.

1defaults write /Library/Preferences/com.microsoft.office "14UserInfoUserOrganiation" -string 'University of North Florida'

Just chiming in with what we do.

System things like enabling ARD we do as part of a "Postflight Policy" that is run as part of our imaging workflow: https://macmule.com/2014/12/21/my-casper-imaging-workflow/

Settings that we wish to set, we use the following in order of preference:

1. Config Profile (user or computer, payload dependent).
2. Managed Preferences (although not 10.10.x).
3. A script that runs via a Launch Agent (so at user login).
4. A plist captured via Composer & deployed using FEU or FUT as appropriate.

However, we're now mostly just using profiles.

MCX is dead/dying. Run away from it with all haste! Otherwise, I love defaults command for this. I tend to modify the default User Template as is described in a variety of posts here though I am one of those @$$#°|@$ that still hand modifies my base OS packages and so I manually configure my user templates and not with my first run script. As has also been mentioned, profiles will work for a lot of these as well and may give you a bit more flexibility.