[Casper] Desktop Pattern

Tue Apr 7 09:22:00 PDT 2009

On student machines here we do a couple things to alleviate this issue.

1.       On student use only machines (basically anything that is not a
teacher machine with AD accounts on it) we change ownership and
permissions of the preference panes themselves via a script so that only
admin accounts have rights.   Since in a lab setting there is no need
for standard users to change those setting.   We do leave, printers and
sound ownership and permissions alone though.

2.       We use a hidden student template that we create and trigger a
policy at startup to ditto the contents of the hidden template to
/Users/student/Library

You can then put as much or little into that template as you want.  In
our case it's mostly plists from the preferences folder, and the
Microsoft info that sits in there too.   I'm sure there's a whole bunch
of ways to deal with this problem, but our district has very specific
and different desires at each location so it was the easiest way for us
to achieve a unified answer to a whole bunch of different requests.    I
made an applescript app that does the bulk of the work for the building
techs too in regards to creating the hidden template, copying the
desired files to it and ensuring proper permissions on it.   

This helps because even if the students find a way to change anything
from the desktop to the toolbars that show up in word, a reboot will fix
it.  Makes it a lot easier to train staff too.    "If it doesn't look
right, reboot"

-Dusty-

From: casper-bounces at list.jamfsoftware.com
[mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Ryan Harter
Sent: Tuesday, April 07, 2009 11:11 AM
To: Eric Winkelhake
Cc: Casper List
Subject: Re: [Casper] Desktop Pattern

I like Eric's solution.  You can move the
DesktopScreenEffectsPref.prefPane file from
/System/Library/PreferencePanes and move it to
/Users/<admin>/Library/PreferencePanes and that should make it
unavailable to your normal user accounts.

I think self healing wouldn't stop the students from spending time
changing the background, it would just change it back.

Ryan Harter

UW - Stevens Point

Workstation Developer

715.346.2716

Ryan.Harter at uwsp.edu <mailto:Ryan.Harter at uwsp.edu> 

On Apr 7, 2009, at 11:02 AM, Eric Winkelhake wrote:

what about self healing the pref with a policy however often you'd like.
or remove the pref pane from the global library and put it in the admin
or root prefpanes folder.

eric winkelhake
mundocomww
office 312 220 1669
cell 312 504 5155

Kathie Iorizzo <kiorizzo at latinschool.org>
Sent by: casper-bounces at list.jamfsoftware.com

04/07/2009 10:58 AM

To

Ryan Harter <rharter at uwsp.edu>

cc

Casper List <casper at list.jamfsoftware.com>

Subject

Re: [Casper] Desktop Pattern

We don't have a OD setup.  We use AD.
___________
Kathie Iorizzo
Lower School Technician
The Latin School of Chicago
kiorizzo at latinschool.org <mailto:kiorizzo at latinschool.org> 
312.582.6136

On Apr 7, 2009, at 10:58 AM, Ryan Harter wrote:

Thats something that you can manage with WGM if you have OD setup.

Ryan Harter
UW - Stevens Point
Workstation Developer
715.346.2716
Ryan.Harter at uwsp.edu <mailto:Ryan.Harter at uwsp.edu> 

On Apr 7, 2009, at 10:56 AM, Kathie Iorizzo wrote:

Simple thing.. I want to lock the desktop patter on our laptop carts.  I
can't find a way!  The only thing is a policy that sets it for log in,
but they don't reboot the machines often and it logs in locally.  The
kids spend 15 minutes of class time changing wallpapers.

My idea.. and before I try it would be to change the permissions on the
preference pane for desktop/screen saver to read only for their user.

Any easier way?
___________
Kathie Iorizzo
Lower School Technician
The Latin School of Chicago
kiorizzo at latinschool.org <mailto:kiorizzo at latinschool.org> 
312.582.6136

<ATT00001.txt>

_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper
<http://list.jamfsoftware.com/mailman/listinfo/casper> 

------------------------------------------------------------------------
Disclaimer 
The information in this email and any attachments may contain
proprietary and confidential information that is intended for the
addressee(s) only. If you are not the intended recipient, you are hereby
notified that any disclosure, copying, distribution, retention or use of
the contents of this information is prohibited. When addressed to our
clients or vendors, any information contained in this e-mail or any
attachments is subject to the terms and conditions in any governing
contract. If you have received this e-mail in error, please immediately
contact the sender and delete the e-mail.

------------------------------------------------------------------------
Mundocom UK Limited, Registered in England and Wales. Registration
Number 2882166. Registered Office: Warwick Building, Kensington Village,
Avonmore Road, London W14 8HQ.

<ATT00001.txt>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090407/9648357b/attachment.html 