[Casper] Desktop Pattern

Tue Apr 7 09:47:48 PDT 2009

I've found that even with locking plists, etc, simply right-clicking on a
picture in Firefox or Safari gives a student the ability to make that the
desktop picture. That's the one loophole in the system.

On Tue, Apr 7, 2009 at 12:22 PM, Dorey, Dustin <Dustin.Dorey at district196.org
> wrote:

>  On student machines here we do a couple things to alleviate this issue.
>
> 1.       On student use only machines (basically anything that is not a
> teacher machine with AD accounts on it) we change ownership and permissions
> of the preference panes themselves via a script so that only admin accounts
> have rights.   Since in a lab setting there is no need for standard users to
> change those setting.   We do leave, printers and sound ownership and
> permissions alone though.
>
> 2.       We use a hidden student template that we create and trigger a
> policy at startup to ditto the contents of the hidden template to
> /Users/student/Library
>
>
>
> You can then put as much or little into that template as you want.  In our
> case it’s mostly plists from the preferences folder, and the Microsoft info
> that sits in there too.   I’m sure there’s a whole bunch of ways to deal
> with this problem, but our district has very specific and different desires
> at each location so it was the easiest way for us to achieve a unified
> answer to a whole bunch of different requests.    I made an applescript app
> that does the bulk of the work for the building techs too in regards to
> creating the hidden template, copying the desired files to it and ensuring
> proper permissions on it.
>
>
>
> This helps because even if the students find a way to change anything from
> the desktop to the toolbars that show up in word, a reboot will fix it.
> Makes it a lot easier to train staff too.    “If it doesn’t look right,
> reboot”
>
>
>
> -Dusty-
>
>
>
>
>
> *From:* casper-bounces at list.jamfsoftware.com [mailto:
> casper-bounces at list.jamfsoftware.com] *On Behalf Of *Ryan Harter
> *Sent:* Tuesday, April 07, 2009 11:11 AM
> *To:* Eric Winkelhake
> *Cc:* Casper List
>
> *Subject:* Re: [Casper] Desktop Pattern
>
>
>
> I like Eric's solution.  You can move the DesktopScreenEffectsPref.prefPane
> file from /System/Library/PreferencePanes and move it to
> /Users/<admin>/Library/PreferencePanes and that should make it unavailable
> to your normal user accounts.
>
>
>
> I think self healing wouldn't stop the students from spending time changing
> the background, it would just change it back.
>
> *
> Ryan Harter*
>
> UW - Stevens Point
>
> Workstation Developer
>
> 715.346.2716
>
> Ryan.Harter at uwsp.edu
>
>
>
> On Apr 7, 2009, at 11:02 AM, Eric Winkelhake wrote:
>
>
>
>  what about self healing the pref with a policy however often you'd like.
>  or remove the pref pane from the global library and put it in the admin or
> root prefpanes folder.
>
> eric winkelhake
> mundocomww
> office 312 220 1669
> cell 312 504 5155
>
>
>   *Kathie Iorizzo <kiorizzo at latinschool.org>*
> Sent by: casper-bounces at list.jamfsoftware.com
>
> 04/07/2009 10:58 AM
>
> To
>
> Ryan Harter <rharter at uwsp.edu>
>
> cc
>
> Casper List <casper at list.jamfsoftware.com>
>
> Subject
>
> Re: [Casper] Desktop Pattern
>
>
>
>
>
>
> We don't have a OD setup.  We use AD.
> ___________
> *Kathie Iorizzo*
> Lower School Technician
> The Latin School of Chicago
> kiorizzo at latinschool.org
> 312.582.6136
>
>
>
>
>
> On Apr 7, 2009, at 10:58 AM, Ryan Harter wrote:
>
> Thats something that you can manage with WGM if you have OD setup.
> *
> Ryan Harter*
> UW - Stevens Point
> Workstation Developer
> 715.346.2716
> Ryan.Harter at uwsp.edu
>
> On Apr 7, 2009, at 10:56 AM, Kathie Iorizzo wrote:
>
> Simple thing.. I want to lock the desktop patter on our laptop carts.  I
> can't find a way!  The only thing is a policy that sets it for log in, but
> they don't reboot the machines often and it logs in locally.  The kids spend
> 15 minutes of class time changing wallpapers.
>
> My idea.. and before I try it would be to change the permissions on the
> preference pane for desktop/screen saver to read only for their user.
>
> Any easier way?
> ___________
> *Kathie Iorizzo*
> Lower School Technician
> The Latin School of Chicago
> kiorizzo at latinschool.org
> 312.582.6136
>
>
>
>
>
> <ATT00001.txt>
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
>
> ------------------------------------------------------------------------
> Disclaimer
> The information in this email and any attachments may contain proprietary
> and confidential information that is intended for the addressee(s) only. If
> you are not the intended recipient, you are hereby notified that any
> disclosure, copying, distribution, retention or use of the contents of this
> information is prohibited. When addressed to our clients or vendors, any
> information contained in this e-mail or any attachments is subject to the
> terms and conditions in any governing contract. If you have received this
> e-mail in error, please immediately contact the sender and delete the
> e-mail.
>
> ------------------------------------------------------------------------
>
> Mundocom UK Limited, Registered in England and Wales. Registration Number 2882166. Registered Office: Warwick Building, Kensington Village, Avonmore Road, London W14 8HQ.
>
> <ATT00001.txt>
>
>
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090407/56decc71/attachment.htm 