[Casper] Leopard Core OS build

[Leacy, Miles]

Hello all,

I think it would be beneficial for us all to share what we feel needs to be
done to the core OS image for Leopard and why.  I¹ll start.

1. Install on newest hardware in production, in my case MacBookPro4,1 ­ long
accepted best practice, gives most compatibility with Mac models
2. Erase & install ­ long accepted best practice, cleans out the hard drive
of any junk before installing a system
3. Custom install, uncheck all optional components ­ keeping it lean and
keeping it modular 
4. Create admin account(s) for IT staff & casper tools ­ needed to perform
admin tasks and manage via casper
5. Set a computer name that will be recognizable as an unconfigured machine
­ easily spot problem machines on the network
6. Disable the guest account ­ security consideration
7. Disable automatic login, password hints, display login window as name &
password ­ security considerations
8. Require password to unlock each system preference pane ­ security
consideration 
9. Turn off Bluetooth ­ security consideration
10. Turn off Software Update checking ­ to keep this under control of casper
policies 
11. Turn off Time Machine status icon ­ In my environment, we don¹t use Time
Machine 
12. Set default energy saver settings for power adapter ­ keep machines from
sleeping or spinning down hard disks while plugged in
13. Run critical software updates, OS, security ­ security consideration, OS
comes out of the gate as up to date and patched as possible without waiting
for a policy to run.

Several of the above items could be accomplished with scripts, policies,
packaged plists, etc..  I choose to set them in the core OS package since
these are the values we want, they have to be set to something, and if we
change our minds later, its easy enough to change them with policies.

-- 
Miles Leacy
Senior Macintosh Technician
Polo Ralph Lauren
212-318-7603
miles.leacy at poloralphlauren.com









This message and any attached documents contain information which may be confidential, subject to privilege or exempt from disclosure under applicable law. These materials are intended only for the use of the intended recipient. If you are not the intended recipient of this transmission you are hereby notified that any distribution, disclosure, printing, copying, storage, modification or the taking of any action in reliance upon this transmission is strictly prohibited. Delivery of this message to any person other than the intended recipient shall not compromise or waive such confidentiality, privilege or exemption from disclosure as to this communication. If you have received this communication in error, please immediately notify the sender and delete the message from your system.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080416/ec2ba7ee/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 5731 bytes
Desc: not available
Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080416/ec2ba7ee/attachment.png