[Casper] Leopard Core OS build

[Eric Winkelhake]

defaults write com.apple.TimeMachine DoNotOfferNewDisksForBackup -bool YES

Stops time machine from barking when you connect an external disk.  I also 
kill all the unnecessary fonts. 

--
Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT
35 West Wacker Drive, Suite 3000 | Chicago, IL 60601
Office: 312-220-1669 | Mobile: 312-519-5632
Email: Eric.Winkelhake at us-resources.com
Open a Service Desk Ticket | Navigating IT | Training Now






"Leacy, Miles" <Miles.Leacy at PoloRalphLauren.com> 
Sent by: casper-bounces at list.jamfsoftware.com
04/16/08 03:33 PM

To
casper list <casper at list.jamfsoftware.com>
cc

Subject
[Casper] Leopard Core OS build






Hello all,

I think it would be beneficial for us all to share what we feel needs to 
be done to the core OS image for Leopard and why.  I?ll start.

1.      Install on newest hardware in production, in my case MacBookPro4,1 
? long accepted best practice, gives most compatibility with Mac models 
2.      Erase & install ? long accepted best practice, cleans out the hard 
drive of any junk before installing a system 
3.      Custom install, uncheck all optional components ? keeping it lean 
and keeping it modular 
4.      Create admin account(s) for IT staff & casper tools ? needed to 
perform admin tasks and manage via casper 
5.      Set a computer name that will be recognizable as an unconfigured 
machine ? easily spot problem machines on the network 
6.      Disable the guest account ? security consideration 
7.      Disable automatic login, password hints, display login window as 
name & password ? security considerations 
8.      Require password to unlock each system preference pane ? security 
consideration 
9.      Turn off Bluetooth ? security consideration 
10.     Turn off Software Update checking ? to keep this under control of 
casper policies 
11.     Turn off Time Machine status icon ? In my environment, we don?t 
use Time Machine 
12.     Set default energy saver settings for power adapter ? keep 
machines from sleeping or spinning down hard disks while plugged in 
13.     Run critical software updates, OS, security ? security 
consideration, OS comes out of the gate as up to date and patched as 
possible without waiting for a policy to run.

Several of the above items could be accomplished with scripts, policies, 
packaged plists, etc..  I choose to set them in the core OS package since 
these are the values we want, they have to be set to something, and if we 
change our minds later, its easy enough to change them with policies.

-- 
Miles Leacy
Senior Macintosh Technician
Polo Ralph Lauren
212-318-7603
miles.leacy at poloralphlauren.com


This message and any attached documents contain information which may be 
confidential, subject to privilege or exempt from disclosure under 
applicable law. These materials are intended only for the use of the 
intended recipient. If you are not the intended recipient of this 
transmission you are hereby notified that any distribution, disclosure, 
printing, copying, storage, modification or the taking of any action in 
reliance upon this transmission is strictly prohibited. Delivery of this 
message to any person other than the intended recipient shall not 
compromise or waive such confidentiality, privilege or exemption from 
disclosure as to this communication. If you have received this 
communication in error, please immediately notify the sender and delete 
the message from your system. 
_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080416/9dc2c2b6/attachment-0001.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 3903 bytes
Desc: not available
Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080416/9dc2c2b6/attachment-0001.gif