Keychain Management (Admin Account)

[joemamasmac]

Hello All,

I am wondering if anyone else is having problems with keychain access and the management account? We image most of our machines via a master image. We use the latest hardware available to make the image and then push to other machines. We also create an Admin account that we then change the password on every 6 months.

My problem is with the Admin account. When we initially image the machine, it has the default password used when we create all images. When we use Casper to change the administrative password on all machines, we constantly get a prompt when logging in to unlock the keychain. Most of my users don't know the "default password", they know the current password that is set for the next 6 months.

I am wondering if there is a way for me to disable these messages for the admin account. If you simply click cancel, you get the error message over and over.

Joe

[nessts]

remove login.keychain from your image. remove it every time you change the password. not sure why you would want an admin account to have saved passwords if you are giving it out.

[joemamasmac]

I really have no reason to have saved passwords on the image that we deploy. Would this just be a matter of deleting it from the Master before I image, or is there another way to automate this process each time the admin password is updated?

Joe

[nessts · Accepted solution]

in the policy that changes the password add a rm /Users/admin/Library/Keychain/login.keychain
to the execute command section of your policy, which is under files and processes on the 9.x JSS and Advanced on 8.x

[joemamasmac]

That looks like it would work, thanks for your help and quick reply.

Joe