- Jamf Nation Community
- Products
- Jamf Pro
- Management Account - When is it created?
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Management Account - When is it created?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-25-2017 04:49 PM
I am trying to run dockutil on my management account to add some things that are needed in the dock for that account. That account also serves as the Admin account on our machines. Running the script after I am logged into that account seems to work, but doesn't seem to work during FirstRun. The User Template dock plist gets modified the way it should and it's in the same script, so I am thinking the management account is created before dockutil modifies the User Template dock plist. I could probably just copy a modified plist file for that account and call it a day but I wanted to understand why it doesn't work. Possibly because dockutil is running the script as root?
6 REPLIES 6
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-25-2017 05:44 PM
What version of dockutil are you running and what is your OS version? I've ran into the same issues, but the latest version of dockutil seemed to fix it for me.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-25-2017 05:49 PM
I'm running 10.12.5 and the latest version of dockutil 2.0.5 it seems to be working as it should with all the other accounts. I have the first part of the script set the User Template dock plist file and the second part (should) sets the dock plist for the management account. I've got the script packed in a PKG file for the FirstRun script. dockutil gets installed first, and then the begining of the script sleeps for 30 seconds to allow dockutil to get installed before trying to apply any settings.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-26-2017 12:37 PM
It had something to do with the plist file for the dock being owned by root. Now it's working like it should. I am still getting the default Apple icons but I think I can fix that with a new User Template dock plist.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-26-2017 01:08 PM
Where in your workflow do you use a .plist?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-26-2017 03:55 PM
Outset is picky about the ownership and rights, so be sure to check that.
Dockutil can be picky about when icons are added. Have you experimented with remove-all and no-restart flags? For example, sleep, remove everything, then add the icons you want with no-restart, until the very end.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-26-2017 08:31 PM
@rqomsiya Since I don't want to modify the 10.12.5 image from Apple, I take a dock plist and copy it to /tmp and package it up to be copied to my management account with it's default icons that we use. I use the same dock plist and copy it to the User Templates folder where I just overwrite it's contents with dockutil. Not sure if that's the best way but it works. I could probably disable SIP and play around with plist files but there has to be another way.
@seann Yes I have played around with the options. I'm sure it's SIP causing the 4 icons (Siri, Maps, iBooks and Photos) to still be in the dock. All of the other Apple apps are gone. It's working for now. I think I'm going to create a LaunchAgent that runs at each login that uses dockutil to delete the icons I don't want.
