Post-upgrade Management?

[#1]

Hey all,

Thanks for the help in getting Lion updates working from Self Service. I've just got one last question.

I'm running a before script to unhide our local admin account, so it won't be destroyed by the upgrade process.

What is the best way to execute a "Lion FirstRun" policy to rehide that account and tweak a couple other settings Lion sets by default? I've got a policy scoped to any client running 10.7, that's triggered by "any", but that still requires that the machine check in first before that policy will run.

Is there a way to get a policy to run any earlier than that? As it stands, our machines are checking in once per hour, but only updating their inventory once a day, so a user updating his machine in the afternoon might not be managed with the Lion FirstRun policy until the next day...

Thanks,
Bob

[jarednichols]

In your management framework settings enable the startup items and policies triggered by the "startup" action. Then create your first run policy and run it on the startup trigger. I'm not sure the startup items are enabled by default.

j

---
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436


[#3]

We've got startup items turned on already, the problem is that the machine won't be recognized as a 10.7 machine at startup. It won't be added to the Lion smart group until it updates its inventory, which may have already happened for the day considering we only run it once a day.

I guess I could scope the policy to all managed clients at startup and add my own OS check at the front of the script...I'll get back to you with my results.

Bob

[jarednichols]

You could create a policy that runs at startup that just does a recon. Though I'm not sure that would immediately fire off the policy that's scoped to 10.7 machines. If it were me, I'd be laying down a dummy package that indicates it's a Lion-based image and scope off of that at startup with run once per computer.

j
---
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436