What type of policies and preferences do you run?

[jmcnab]

Hey Everyone!

I'm new to the Casper world and wanted to see what kinds of Policies and Managed Preferences the community uses. Are there daily or weekly maintenance polices (scripts) that you run on your systems? What kind of software do you make available to your organization?

I'm hoping to pickup maintenance tricks and ideas to implement in our environment.
Thank you for your input!

[thoule]

I use it to offer applications to uses, such as BBEdit, that they may want. I also use it to maintain that agents are running. For example, AV is required. So I have an Extension Attribute to determine if it's running or not. Then a smart group from that.. ..Then a policy to install to that group. I treat AD binding the same way, rebinding if a machine does not show as bound to AD. I also use a solution I developed within the JSS to keep applications updated on user's machines (https://github.com/tmhoule/AppUpdates)

[Chris_Hafner]

We're an edu so here's some of the things we provide via policy. I'm not really mentioning anything about what we load onto our machines during imaging/enrollment. Here's everything I could just type in a quick list... sorry for not being a bit more organized.

Optional install via Self-Service such as:
- Additional Network Printers
- Additional Multimedia apps (Adobe CS apps, CAD software, elective class specific apps installed)
- RehearScore (app for our drama folks, it lets them practice their lines/singing parts)
- Drivers Ed materials (Provided by our outside Drivers Ed instructor)
- Non-Critical Web Browser Updates
- Grammarly App
- QDriverStation (FIRST Robotics)
- SMART Notebook (We don't use SMART software broadly, so this is an optional install)
- Kurzweil 3000 (plus additional voices)
- VirtualBox
- f.lux... until Sierra
- DragonDictate (Being deprecated)
- MS Remote Desktop
- Casper Components (For IT staff)
- FinalCut Pro
- Motion
- Lightwave 3D
- VLC Updates
- Handbrake (Faculty only)
- MS Office Updates when non-critical.
- Major OS Upgrades (i.e. 10.11.x to 10.12.x)
- Citrix (Various Versions)
- WebEx Client
- 1Password
- Skype Updates

TESTING ENVIRONMENT(s)
- Safe Exam Browser setup and initialization (for Moodle quizzing)
- Test User (Adds a parentally restricted test user account for in-class test accommodations)

Enforced Profiles:
- VPN
- FV2 (Select Groups) -A follow-up policy adds user and our admin account to the FV2 user list

Pushed Policy items:
- Flash Updates
- Java Updates
- Printer Drivers (Generally updates)
- Critical Updates (usually security related)

Maintenance Policies:
- Re-Initiate CrashPlan Service
- Re-Install Cylance
- Optional FV2 initialization for select groups
- (If any broad issues arise I may put a repair policy here, but in general, this is not necessary)
- Run jamf recon (Called Inventory)
- Clear all browser caches
- Delete/Reset User Keychain
- UnHide User Libraries

Notification Policies:
- Repaired computer ready for pickup
- Notification of policy violation
- Notice to the user if they haven't restarted their computer in over 30 days.

These briefly cover nearly 200 policies that have evolved to meet the very granular needs of our community. That said, I bet I have a bit of cleanup to do...