So I finally decided to leverage the Managed Preferences (MCX)
settings in my JSS. I created a Managed Preference manifest to turn
off the open "safe" files option in Safari and pushed it to all my
users (who are all Admins).
I noticed afterwards that this appeared to enable "Parental Controls"
for all my users (and in fact any user on the system). I realized that
this is probably because JSS just manages the local ds store for
manipulating MCX settings for each user (i.e. these machines are not
bound to an OS X Server to get their MCX settings, so JSS manipulates
it locally instead for the same effect).
However, I've now decided that I don't want this MCX setting on any of
my laptops. I've disabled all Managed Preferences on the JSS, both
user level and system level, and have actually deleted any managed
preferences manifests that were created.
I thought that upon relogin or restart, this would remove these
MCX-applied settings from each machine, but they appear to be staying.
I've tried manually deleting the MXC settings in ~/Library/Managed
Preferences but upon relogin or restart, these MCX settings appear to
be pulled down again from the server (which is weird, because JSS
doesn't have these settings set anymore). Maybe it's pulling it from a
cached setting somewhere?
So, how can I revert what I've done? I don't want my Admin users to be
managed or have Parental Controls enabled.
FYI, I will instead push this Safari change using a script that uses
the defaults command.
Thanks,
Damien Barrett
